Static task
static1
Behavioral task
behavioral1
Sample
0ca2682c1abe2ae2b0f7119311f0c884_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ca2682c1abe2ae2b0f7119311f0c884_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ca2682c1abe2ae2b0f7119311f0c884_JaffaCakes118
-
Size
4.4MB
-
MD5
0ca2682c1abe2ae2b0f7119311f0c884
-
SHA1
f5652adb6716d3500796c1b63ab2aa2d3692648f
-
SHA256
8902d13dd08a297b4733c28bf111412d7723d853bf5b3e4a796c5f4cb8b1f479
-
SHA512
f09f67bae5aa4fbe1468f4df5a35afe922bff7fd8bc5b4f042a6dced1ba69a91aa84ad8d26a722f4aa68d7cbe3569dc35df2c2c2b346f9919345ed7447e4df94
-
SSDEEP
6:/RHUWc6Biz1IPAdwl0t5WXvwQhk765lX9/mA:uDZ4iZQyG57m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ca2682c1abe2ae2b0f7119311f0c884_JaffaCakes118
Files
-
0ca2682c1abe2ae2b0f7119311f0c884_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 426B - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 453KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE