Static task
static1
Behavioral task
behavioral1
Sample
0b4fc92a1c5f84a0fa5326e4a41b3597_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b4fc92a1c5f84a0fa5326e4a41b3597_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b4fc92a1c5f84a0fa5326e4a41b3597_JaffaCakes118
-
Size
213KB
-
MD5
0b4fc92a1c5f84a0fa5326e4a41b3597
-
SHA1
77c4ae00a1918604a1e532778f7d9cbaef635d53
-
SHA256
c816b6d81ec9215a848bd8a37b1bb2cb6e08d739bcde2901515b07bf65589429
-
SHA512
e69eaa6e672fec2bdc9f082fba11aa38c802bb440433bcf8cb8d654b6cc2c56653085f1a607956d570009d947afadf79d6dd2fe98f736f00c96b3bad9ac3d0e9
-
SSDEEP
3072:iNu9h3eiLZT2UTOyU2qTq/yecrqyEIlyny4iio1t1oBM9/AC99kLNh11GJ+UEtEj:lh3eeTXFUnq/yesLEoynn7BMJSXtt34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4fc92a1c5f84a0fa5326e4a41b3597_JaffaCakes118
Files
-
0b4fc92a1c5f84a0fa5326e4a41b3597_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE