Static task
static1
Behavioral task
behavioral1
Sample
0daaf1a4fbf614a3416163c44079bf99_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0daaf1a4fbf614a3416163c44079bf99_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0daaf1a4fbf614a3416163c44079bf99_JaffaCakes118
-
Size
1.1MB
-
MD5
0daaf1a4fbf614a3416163c44079bf99
-
SHA1
aeddb662f1f4289be95559b4cc127bec5dcd5fe3
-
SHA256
54df920da41cad2c6c4b1a8181403b113547ad17b6448fbba1f5583e20cdeb97
-
SHA512
cc780122c9dce97fb17bd964c017757f182ee6a3605b278726d0f7d440b2a25acb1aa876e6b2fbd22a341c88ca44c93c7e228f53274b928c72166276fcbe699b
-
SSDEEP
24576:Ey/72yrKG+N+ymzMciCbrdXQseKkSKLjnL2PXFJpR46o/hr/hiiDmU:LjAXNdciYrdIHL2f5S6oNJZmU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0daaf1a4fbf614a3416163c44079bf99_JaffaCakes118
Files
-
0daaf1a4fbf614a3416163c44079bf99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE