Static task
static1
Behavioral task
behavioral1
Sample
f9bc3be5b5f2f585ce592c63c8db6818_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9bc3be5b5f2f585ce592c63c8db6818_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f9bc3be5b5f2f585ce592c63c8db6818_JaffaCakes118
-
Size
43KB
-
MD5
f9bc3be5b5f2f585ce592c63c8db6818
-
SHA1
8edff4ac2b7e1e7563a27a2bfbaa0555624d0820
-
SHA256
74e182c0d2e1387d5ce1267012300f7c2ea062adf2beab3a23b374e895741542
-
SHA512
c251925d81238931dc13591893d6950f79f9833152a230c32557b976640eed84d02ff340c0a213acca86874360ac85797cfa4ff6a51487431ae4db65e4631945
-
SSDEEP
768:Z2EwiLf5TcMwcok5KEnDvqwnfKM+dgG4esOKJHYPhLw2EP47EAzFVxhIQ6bGgyw4:Z2qLiMrok5KEnDvHD+f/sOKJ4PhdgwEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9bc3be5b5f2f585ce592c63c8db6818_JaffaCakes118
Files
-
f9bc3be5b5f2f585ce592c63c8db6818_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE