Static task
static1
Behavioral task
behavioral1
Sample
ea3543073610ac13bcaa0057714a9750_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea3543073610ac13bcaa0057714a9750_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea3543073610ac13bcaa0057714a9750_JaffaCakes118
-
Size
360KB
-
MD5
ea3543073610ac13bcaa0057714a9750
-
SHA1
bf24a8bad5d52ba881995c22d1a0011fe462dd25
-
SHA256
77e046a28b147433a76e70455e6c352f9f24fdcd3e9cad0c8dc2d105720a7f75
-
SHA512
50cd6d8c7f6f9e69f1bdff3b9aba6e33e5082b0b54423b3b93a260ede456f9e60dadc1796ce1cd46be542fb3dd88a1c0252dec9da409d0d6c756faa862608bac
-
SSDEEP
6144:TURfH/MQo+ai1qoNJruUxo1wIOGWnql4MWmr1uDdRw3Cf3K6obOkyCQYxUwXDG9Y:TQHkRY1qWub1iGWu4vsARwSzVkyhY5Tn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea3543073610ac13bcaa0057714a9750_JaffaCakes118
Files
-
ea3543073610ac13bcaa0057714a9750_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 360KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE