Static task
static1
Behavioral task
behavioral1
Sample
f5a1ff05f96a8bc8f5b4d110dc4f6125_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5a1ff05f96a8bc8f5b4d110dc4f6125_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5a1ff05f96a8bc8f5b4d110dc4f6125_JaffaCakes118
-
Size
1.2MB
-
MD5
f5a1ff05f96a8bc8f5b4d110dc4f6125
-
SHA1
f600e0f442e59f970ef67d4541bda8f5b149fe6a
-
SHA256
6e568e670525529ac8fd4cd1de87a12ebcd9a33f4f7dbd71986071d2034be498
-
SHA512
9498e83ab2e9e964415a084136615581b03443734ea34941942d785c7d0c295fc8f65ec79ff182ce4e13cb5f3cfb1138a0ec6506cd48ff09cae9bab54ca91af6
-
SSDEEP
24576:ddb7j0Xx3zgtT/n6ltIy9Wu4gdHf8gt+XYvjHHYvlA8Pw/t6MrsJCQv2vEXv:dh0x0bAtIy91/8pXqLuA+w/9gxv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5a1ff05f96a8bc8f5b4d110dc4f6125_JaffaCakes118
Files
-
f5a1ff05f96a8bc8f5b4d110dc4f6125_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE