Static task
static1
Behavioral task
behavioral1
Sample
3ae5249cb27c2f0b9abfb13ffa6a69b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ae5249cb27c2f0b9abfb13ffa6a69b2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ae5249cb27c2f0b9abfb13ffa6a69b2_JaffaCakes118
-
Size
318KB
-
MD5
3ae5249cb27c2f0b9abfb13ffa6a69b2
-
SHA1
ffdd557126325a943d9555490e0f0f702052a169
-
SHA256
ae1ec0e8827829de119792fe17d28dc20e18401a8525929815b5e502f31011d8
-
SHA512
57688c174d7f7bcfee9afa18c6a2d86f2c540b48c015bc6d20858b4402f6320a758220633edf6fb0088fb05f8275c0efadfcc72f70b003b6ca953f12953a13b6
-
SSDEEP
6144:UHf0mryvA8J5KxGtWFmWn8ZdAZho/DND2d7C4F7JJcgch3CnT2p5nP89jtC:UHRcAHnmZkM21C4FZK3CT27nPstC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ae5249cb27c2f0b9abfb13ffa6a69b2_JaffaCakes118
Files
-
3ae5249cb27c2f0b9abfb13ffa6a69b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE