Static task
static1
Behavioral task
behavioral1
Sample
0e37883f50326c5da75e2d765d6067e6_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e37883f50326c5da75e2d765d6067e6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e37883f50326c5da75e2d765d6067e6_JaffaCakes118
-
Size
29KB
-
MD5
0e37883f50326c5da75e2d765d6067e6
-
SHA1
f1c95a3dacedc53dcc64639526a641ebd6be8373
-
SHA256
6003e08d5298671c30e83de45b924ff398b593954c1d5af4828719be370ea6e9
-
SHA512
a969301d55749f682a93366c805103433f2bbf19cbc0b34147d649ae026175f5a78fc87f85f2ec82021e97b059c67b03e402b1fcdb49448ff817672eb5cebb4c
-
SSDEEP
768:5DZvKKfqbDQF5w0aFGgjD/bhaKRhdvWY/tZGUUQW5O0AJ:5VyKfq4v1kGgXbhXRD91vi5HAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e37883f50326c5da75e2d765d6067e6_JaffaCakes118
Files
-
0e37883f50326c5da75e2d765d6067e6_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE