Static task
static1
Behavioral task
behavioral1
Sample
eff6ade2ed68d216143304f92d9a3a8b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eff6ade2ed68d216143304f92d9a3a8b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
eff6ade2ed68d216143304f92d9a3a8b_JaffaCakes118
-
Size
221KB
-
MD5
eff6ade2ed68d216143304f92d9a3a8b
-
SHA1
7566ef2371c9e92365a69d36432f29d1e772fc27
-
SHA256
73e30645d1dbc3eb55215fa8300b455aa083ca0d4cae1e48a5c11ca500f30c9f
-
SHA512
ca1cb55afedda8921f19647223dfd0ccef74fabdfdf90d2f3de6a8b3ea7bddd8370a0b0c4204f08aec6a76da02341b17e2e56a202f089fa9fbd46d255af1262f
-
SSDEEP
6144:f6jpS8BWXEbaeDsOjlz9Efd9hkRUFcqOJWQttd4cYNOMnbMy7tH:EU1qz8nBFcqpQTqcaPTt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eff6ade2ed68d216143304f92d9a3a8b_JaffaCakes118
Files
-
eff6ade2ed68d216143304f92d9a3a8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE