Static task
static1
Behavioral task
behavioral1
Sample
c2a2b0a1d58d5a66b8231e80bf9a7477_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2a2b0a1d58d5a66b8231e80bf9a7477_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2a2b0a1d58d5a66b8231e80bf9a7477_JaffaCakes118
-
Size
530KB
-
MD5
c2a2b0a1d58d5a66b8231e80bf9a7477
-
SHA1
774accd8a98be61b80ec5b1f5678b7e0069df61b
-
SHA256
196eb5c8e10c8b7cae77ff99f4289cd3c18b02762876023d5f0b6f4ed5a7460b
-
SHA512
b4097347fe7ef0c48b4288a8a34e89ed16b9a8eab071f653ab08912b697c505548500b2e775191f71bd4bb540657ea2fd729fcc1a16cfcc86a9f79bbe1d1453f
-
SSDEEP
12288:42swIcSOeyyPB4OwqoygpBzjSy1AN8ikoT3hUkTh1N3kLczA4B2j6:42OROeyyPB+qoywBHSQiL3hUkTh1N3ko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a2b0a1d58d5a66b8231e80bf9a7477_JaffaCakes118
Files
-
c2a2b0a1d58d5a66b8231e80bf9a7477_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 528KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE