Static task
static1
Behavioral task
behavioral1
Sample
0ea2c94c7f2ff53d098b4c2877f66015_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ea2c94c7f2ff53d098b4c2877f66015_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ea2c94c7f2ff53d098b4c2877f66015_JaffaCakes118
-
Size
317KB
-
MD5
0ea2c94c7f2ff53d098b4c2877f66015
-
SHA1
6bb54983d0b7f94cf0e9b9d11057fed2093d90c2
-
SHA256
a023cb8a7ce79c9f5a546037788997be3d0cfc2e43355d0b352b1fd0d3368ff2
-
SHA512
a0ad804ccc7899b234158cd8464cfebfd4226cd4112b9c7c73cbea2f5ff8eeda6bdfc3a87e07b118b7290fd952fd1ab2a81558d6f2c428cb4bdc1ee25dc7c55d
-
SSDEEP
6144:P2xJ2odfRWaCfDlVLnYUe/5RVhD9rYrJi+gRN29iX43JRljoQw7PR+c:PmJ2mmlZi7VR9sJgRNgjlsQwN+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea2c94c7f2ff53d098b4c2877f66015_JaffaCakes118
Files
-
0ea2c94c7f2ff53d098b4c2877f66015_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 316KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE