Static task
static1
Behavioral task
behavioral1
Sample
2f16f9c416b7e9cd81d4bd00c9936bee_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f16f9c416b7e9cd81d4bd00c9936bee_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f16f9c416b7e9cd81d4bd00c9936bee_JaffaCakes118
-
Size
648KB
-
MD5
2f16f9c416b7e9cd81d4bd00c9936bee
-
SHA1
05ffd45a6cae8ab11f6bf1fa82e129a87d9b7dee
-
SHA256
7aecae4c7c332ec621b875f8bd51b762fc45000c7f9b352f99ad1f80289dab5d
-
SHA512
b60b9b8b68b8355bc780127e451625bb98724c5cea924d1a14f6395db9dc643e05868ace416ca69553a9cf193bbd50cecacd99f1b78c2d32f1b2d7a3dabf2bdb
-
SSDEEP
12288:1J7CaD+z1UWkvLW17gSLJcRbyo1Tp6YusoOLqDGG4MKkXIlihZ9Az/w3Fd6:zezYLI7gAKZfuQrpuXtZmzWu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f16f9c416b7e9cd81d4bd00c9936bee_JaffaCakes118
Files
-
2f16f9c416b7e9cd81d4bd00c9936bee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE