Static task
static1
Behavioral task
behavioral1
Sample
2b09ba055b07357aa2efad39ba8473a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b09ba055b07357aa2efad39ba8473a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b09ba055b07357aa2efad39ba8473a9_JaffaCakes118
-
Size
863KB
-
MD5
2b09ba055b07357aa2efad39ba8473a9
-
SHA1
e6344990501737b8eef7ce6c64bd3d244d661977
-
SHA256
dadb08d263920227c068df839ef447128d7503f921fc71e629cd9814b1b00d92
-
SHA512
2cba800a7504caf195c4d17b2e48812ae2849fd322e7991082e8fe4043504ff9f4d36a19b690b1bd94e4b026b6fcf212f1aa24f6efb8ccec83d7325db513918c
-
SSDEEP
24576:Kgrng5YQwA+Ck64NisW0gmDpoP3I/HOPKDJppw:K2nAlbpKW05OvYOwpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b09ba055b07357aa2efad39ba8473a9_JaffaCakes118
Files
-
2b09ba055b07357aa2efad39ba8473a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 863KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE