Static task
static1
Behavioral task
behavioral1
Sample
edb8a5a321fe0984e87b6f6a76d0f0f0_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
edb8a5a321fe0984e87b6f6a76d0f0f0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
edb8a5a321fe0984e87b6f6a76d0f0f0_JaffaCakes118
-
Size
221KB
-
MD5
edb8a5a321fe0984e87b6f6a76d0f0f0
-
SHA1
3ec43009cc616da0e63af4f903c6dbeb3ab0d3c6
-
SHA256
1cafab7a9ea83e978a69901d377ab686714c35100e9b3747008a54228403181f
-
SHA512
db1251469cb847e51f9fbc4724bf915299e4036e6a15105c8588d0f249ae77a1f5b61415b400b6553b838dcd11f478dedaf00925bd39e27e794334fdcef20f3f
-
SSDEEP
6144:ecJ0tQKWZFYxfKbUYnuuAXR9yHGQevXT4hTJBa3:6tWSKhvAXiHSr4hTJBi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edb8a5a321fe0984e87b6f6a76d0f0f0_JaffaCakes118
Files
-
edb8a5a321fe0984e87b6f6a76d0f0f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE