Static task
static1
Behavioral task
behavioral1
Sample
0dbf9d1fa25e25a560cf867528f03d1b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0dbf9d1fa25e25a560cf867528f03d1b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0dbf9d1fa25e25a560cf867528f03d1b_JaffaCakes118
-
Size
666KB
-
MD5
0dbf9d1fa25e25a560cf867528f03d1b
-
SHA1
99fe8d6f704773fe33cba9e39c816af94484e467
-
SHA256
ee088dd92eeaeeb04923c1e5fd415e747cacba9f57ea72b0aece9c882e9f2fd6
-
SHA512
bcc486482fbe1d34c8e6b7ee53c2a8554932008538ef3135f576185945e519dc4646610a7a3b4c95901b797120ae52d3d75e3294fbf2c2e6e6b8d65aabf61eaa
-
SSDEEP
12288:H0lXjI0lEgPvY9oOoB6z5tPpj5QPdPRpFm5yBwZNpdl1zDSvSJ/2ISo:HQUdgvdODtPc1P9m4KTOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dbf9d1fa25e25a560cf867528f03d1b_JaffaCakes118
Files
-
0dbf9d1fa25e25a560cf867528f03d1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 665KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE