Static task
static1
Behavioral task
behavioral1
Sample
073365f5699f289da5f953ccd09c7747_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
073365f5699f289da5f953ccd09c7747_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
073365f5699f289da5f953ccd09c7747_JaffaCakes118
-
Size
122KB
-
MD5
073365f5699f289da5f953ccd09c7747
-
SHA1
87635869e917883ec97e06bea10874d032347a64
-
SHA256
683c5097232d4df8392a1bb659822a5b170203bc8239e2c74d4a6352253f80c7
-
SHA512
e30d605d4ef193418cb9ffbc88423dca2a438f705bdd59f1824caa10b9547a08210f32f47934ab1b120b6eb8fbd8310584c08452cb5ac973bbd47d6d4eef27d1
-
SSDEEP
3072:Egopwt0QX/yKYO8zt5yeB/Ul5kB/vil6uBfkJwVuapX3L2zKQ:DpDP8Z5M3MdYkKkUqOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073365f5699f289da5f953ccd09c7747_JaffaCakes118
Files
-
073365f5699f289da5f953ccd09c7747_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE