Static task
static1
Behavioral task
behavioral1
Sample
fff912e7ec1bafcf52349092d3bdd7d0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fff912e7ec1bafcf52349092d3bdd7d0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fff912e7ec1bafcf52349092d3bdd7d0_JaffaCakes118
-
Size
6KB
-
MD5
fff912e7ec1bafcf52349092d3bdd7d0
-
SHA1
b5ca166d19dbfddf7390d155b9f186dcc011767d
-
SHA256
a001f1692d0cc1d7f8b54676d8764d8643fe464034e0f4171c2f19c167e498ad
-
SHA512
266ce2b1c6a6f6381573ae58bf198f00fe5bc891ae0c5351d8725ae03350a2b696dd92e6b540a33db2d9f41751ba845c0b6c017ed4db7b5eb0f3f80543bd0a31
-
SSDEEP
96:rYMpNyQPJq+u4GbCuYrxOTiWKdiKuq4fr8d55H33:FpNZZGOuYtnWuuq4T+5H33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fff912e7ec1bafcf52349092d3bdd7d0_JaffaCakes118
Files
-
fff912e7ec1bafcf52349092d3bdd7d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE