Static task
static1
Behavioral task
behavioral1
Sample
f7e0ed6e85a8a9f611b44357a13eb005_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f7e0ed6e85a8a9f611b44357a13eb005_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7e0ed6e85a8a9f611b44357a13eb005_JaffaCakes118
-
Size
164KB
-
MD5
f7e0ed6e85a8a9f611b44357a13eb005
-
SHA1
b413f2bb63f50e3ceb2aef4a56234b6ad1986d9b
-
SHA256
a157642d7a91bbaa29ff4874fdc85f8903585596d3a3fa958595b6b644391104
-
SHA512
24b241964b281afae738cca59d1fa58e26456c188837b1f8a377ea33b7e45a819798f18e418489417803d861eaa9066f61767ed133631483850e78f668be0b12
-
SSDEEP
3072:aJmFNkPcLw0pYmLwIZmi5VQK/EtkFr1QpIzWASKel8fF8+1TEx8FJ:aJ3KfKgmGQc5rKWzvSKeWG+1d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7e0ed6e85a8a9f611b44357a13eb005_JaffaCakes118
Files
-
f7e0ed6e85a8a9f611b44357a13eb005_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE