Static task
static1
Behavioral task
behavioral1
Sample
c2427ef3235cc400767783e6f6b9e657_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2427ef3235cc400767783e6f6b9e657_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2427ef3235cc400767783e6f6b9e657_JaffaCakes118
-
Size
451KB
-
MD5
c2427ef3235cc400767783e6f6b9e657
-
SHA1
29636ed5ad3aa6a488006662ec812fe4b1dfb216
-
SHA256
bf9e2fc9c53e8c0da885df3109adf401e73a791d2f97583695ec5b12bcfa4a58
-
SHA512
780df68623eb9d8778ca1df387dc88153c75a5fa36079d83fc0e1f68047d4b50de53a313102e07b5c0dd5bc3b7d0f8281cbeac738427fd3aebcb09c5a7de684a
-
SSDEEP
12288:w+TSBdfZzocbwc23UgvY96DeuBssznTf3Z0jfG/:w+MxZX09kgvU+D7J0ju/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2427ef3235cc400767783e6f6b9e657_JaffaCakes118
Files
-
c2427ef3235cc400767783e6f6b9e657_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 450KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE