Static task
static1
Behavioral task
behavioral1
Sample
b684e4b492adafa36563453e7411f0d9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b684e4b492adafa36563453e7411f0d9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b684e4b492adafa36563453e7411f0d9_JaffaCakes118
-
Size
3.0MB
-
MD5
b684e4b492adafa36563453e7411f0d9
-
SHA1
97dccaa557560e812a4e26236dcb51dddfaf7a82
-
SHA256
7343e44999669d2e682350de6f972098d7d72c86f732680336613ba607d6d937
-
SHA512
f3c7a389a6565ab4fd4b6303f706948e7bf9e91cae9bb2c49e8b3060e749920fee22887a14e95b5a16db90d0fdc993fdc9a48d0027d380eede34001b6847fb7d
-
SSDEEP
24576:aQGc/uRUjsVTIWz3gA4CJUNpEs898SBS+NDCcSKVGglNHspbqdsMtTUBFNYRYr86:aQPaKnbpevT07B8ipkE+210FXyooyC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b684e4b492adafa36563453e7411f0d9_JaffaCakes118
Files
-
b684e4b492adafa36563453e7411f0d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2fc000 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE