Static task
static1
Behavioral task
behavioral1
Sample
09a71b2dc656c2831a818018534ba136_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09a71b2dc656c2831a818018534ba136_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09a71b2dc656c2831a818018534ba136_JaffaCakes118
-
Size
1.4MB
-
MD5
09a71b2dc656c2831a818018534ba136
-
SHA1
ee1c1a41e53de53a9409619c08a2e767ca6b13f0
-
SHA256
44db7bb3a4836696c51933a4249fb2d9ff02396c044d740d9d15c19283039773
-
SHA512
103a0ff637fe97bd74712dbef4ee0850c5074d13a8009db5f112258141fb271a1f505bc883d6e3fab97147fa815b22080b508b1ae68e8a9b9d4f6194d4d305a1
-
SSDEEP
24576:cVcyMQt7+MVGoDRZbECOvVwVs6dLwzthGP/RN+6IZiLWO+DA:cJ7VuC8n6FItr6CiL0D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a71b2dc656c2831a818018534ba136_JaffaCakes118
Files
-
09a71b2dc656c2831a818018534ba136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE