Static task
static1
Behavioral task
behavioral1
Sample
278e9dc89d1b43b37b580d4c445ef05f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
278e9dc89d1b43b37b580d4c445ef05f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
278e9dc89d1b43b37b580d4c445ef05f_JaffaCakes118
-
Size
591KB
-
MD5
278e9dc89d1b43b37b580d4c445ef05f
-
SHA1
5afc801ee191a6724528f725b06c04121d8ccacb
-
SHA256
b918675c12b89ddbeab04419cc28240440aae92d106cf6d82720fb2e9a681dc2
-
SHA512
599ca46a274883b4c537894d5d050b1cf0c05947529f40b5d1954daf3c369e2993762b94ae6e9c4f50593eee1f6cfbe1cd56bb3619293621751650bd9dc25370
-
SSDEEP
12288:VCH24fcJvwtbZVoNKHnK0eipLwHIxYF2T/qRk2WrNI5sRUrJhbC:VI8vosgHnK0eip460c4Wr65sCrzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 278e9dc89d1b43b37b580d4c445ef05f_JaffaCakes118
Files
-
278e9dc89d1b43b37b580d4c445ef05f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 590KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE