Static task
static1
Behavioral task
behavioral1
Sample
f011d5534bc19ff7bf46f37714e5fd01_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f011d5534bc19ff7bf46f37714e5fd01_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f011d5534bc19ff7bf46f37714e5fd01_JaffaCakes118
-
Size
1.4MB
-
MD5
f011d5534bc19ff7bf46f37714e5fd01
-
SHA1
81bfab0eec8bbc53adf483c88aba2ac333bf1a0c
-
SHA256
e91df4debad376aad3bad2eb38995e74f781d79c57e5902c855763b8bcd84e41
-
SHA512
0d4335a8591fa4addc53272fee731f1f7f9f1651f00754c4214b6b42920390d4b519942458da133ef9084eddb88b1f085623e8193128b7668d9154265f43ad26
-
SSDEEP
24576:jr7egQhxAap9Smjb+c3wdFBIio/3yEzbhYzYINjoxBo8tK4/idh:yZhxAO9Smf+YcciQ3yEzbGL9KK0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f011d5534bc19ff7bf46f37714e5fd01_JaffaCakes118
Files
-
f011d5534bc19ff7bf46f37714e5fd01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE