Static task
static1
Behavioral task
behavioral1
Sample
4c2fb22120eff887f77a2f6f3948b593_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c2fb22120eff887f77a2f6f3948b593_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c2fb22120eff887f77a2f6f3948b593_JaffaCakes118
-
Size
880KB
-
MD5
4c2fb22120eff887f77a2f6f3948b593
-
SHA1
cacf51bf361a3e14a15f6d35c75cb5d84597053f
-
SHA256
2e0fa51db294e3d072f19c8855e74c22c1f0dc2df17686ac22a866249213f2f8
-
SHA512
c4f6d76764b2cc91f095995d11f93b3eb04305518f314de26f0935b1a21e8a3043a1c67b3fe42217f975db0acacddc059229b8fb12c44322e20c6cd0c09524d8
-
SSDEEP
12288:a/uVjB2vaXhJojxb5x4w6mT7f/8d4Xqg+Q/u6EQuODru8IH0Xe8eRPgc/F/NEDk:Z2vmubYmnfkUqg+krula1cBNEI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c2fb22120eff887f77a2f6f3948b593_JaffaCakes118
Files
-
4c2fb22120eff887f77a2f6f3948b593_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 879KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE