Static task
static1
Behavioral task
behavioral1
Sample
0a566def0be58efd5c6cd1bd9c5f8c6f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0a566def0be58efd5c6cd1bd9c5f8c6f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a566def0be58efd5c6cd1bd9c5f8c6f_JaffaCakes118
-
Size
12KB
-
MD5
0a566def0be58efd5c6cd1bd9c5f8c6f
-
SHA1
7357623f00b16d84371e83f85d70b324766356d6
-
SHA256
a925d5c8665a2fcef1831ce1db2045811873a2b127ee986a0e428e6e6f15b9f7
-
SHA512
7a6d00e745b1533d40a57c30f4cecd945d044ef0d2fae75db913ad652f378cd5860b8916c00f20bf88c7810e1d0b70b6818e266fe283303e37a5508e4be497bb
-
SSDEEP
192:TuECsaRtDrXGOuF+8l76WAKC+XyUy2+ovx6kbR3:yECs4tvXGOuF36PsXw6xlR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a566def0be58efd5c6cd1bd9c5f8c6f_JaffaCakes118
Files
-
0a566def0be58efd5c6cd1bd9c5f8c6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE