Static task
static1
Behavioral task
behavioral1
Sample
faa9a770fd2d6a1f6f4cc12ea7d50e88_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
faa9a770fd2d6a1f6f4cc12ea7d50e88_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
faa9a770fd2d6a1f6f4cc12ea7d50e88_JaffaCakes118
-
Size
41KB
-
MD5
faa9a770fd2d6a1f6f4cc12ea7d50e88
-
SHA1
e435c979d7933f311962edee43f8f2be68521010
-
SHA256
3c8f3aada37a57f70a222577c285ec0ba708703f69a03a4ca56feb2070ed0160
-
SHA512
a9dcb90a0e3e9e6354a6abbd9eeca0a65404a3672217d4b420051ee601299c5d51dc7ba5396ef95792c44249a0bbfc454dc939d93cc66b4fd8b0f8f3e24d0dca
-
SSDEEP
768:3Y2uJXOxqgxDi+CqXFpwHsO85vlc4EcmijLRQVWMPponc75RrpxK0bd:3YnXyxDiZps75WI9aDBp7/C0bd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faa9a770fd2d6a1f6f4cc12ea7d50e88_JaffaCakes118
Files
-
faa9a770fd2d6a1f6f4cc12ea7d50e88_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE