Static task
static1
Behavioral task
behavioral1
Sample
175b1b43a0ea38b2984a298dce0b8caa_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
175b1b43a0ea38b2984a298dce0b8caa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
175b1b43a0ea38b2984a298dce0b8caa_JaffaCakes118
-
Size
273KB
-
MD5
175b1b43a0ea38b2984a298dce0b8caa
-
SHA1
7f9ca923e58416ce9fad0af7a1176ac817e05db3
-
SHA256
ed9abf986a0ea59f55da28e0e8535eb47452b38ecd1639408736e87a8306e175
-
SHA512
6f3dd7ac232018367b90adeb3772f687d50375392535674a994dbc7be6337b30004015937becda5a897491dd7fc887b634553621e062c9031d06df76d7305d2f
-
SSDEEP
6144:1+GsOKWnAKHC9XVCX5bw91IWlBdmBVyac8fG4iJR1DIepUEgaiC8HwkA6lD+Xq72:JaWAEE8X5bw9BdN8+35UEgd9QkAID+XD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 175b1b43a0ea38b2984a298dce0b8caa_JaffaCakes118
Files
-
175b1b43a0ea38b2984a298dce0b8caa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.�� Size: 147B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.�� Size: 293B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ