Static task
static1
Behavioral task
behavioral1
Sample
1aaa6bbaa6c56b5eafc7613949bf18cf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1aaa6bbaa6c56b5eafc7613949bf18cf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1aaa6bbaa6c56b5eafc7613949bf18cf_JaffaCakes118
-
Size
506KB
-
MD5
1aaa6bbaa6c56b5eafc7613949bf18cf
-
SHA1
07943e96ab2de29e04599fbb8386449e07ed8242
-
SHA256
94192b556e343f6bc9618dac029c2f20e803757fd61b9fbc88d36ae4795a31f7
-
SHA512
93f0789e8864dbb6f4d31dbef9451ea32595bb48a18b39f7f561b971613cf31bc569655d8fd664be47e9aae9dd6c5d36c261c44c1a29ce1f03e563232278a50b
-
SSDEEP
12288:oJZ6MuV/nx8T0Vd5QUjC2gtPUgCwX8wghj:oJk60T5QUjC2eUxwXRghj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aaa6bbaa6c56b5eafc7613949bf18cf_JaffaCakes118
Files
-
1aaa6bbaa6c56b5eafc7613949bf18cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE