Static task
static1
Behavioral task
behavioral1
Sample
42200e054ccc00a6dff1686cfdd9961c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42200e054ccc00a6dff1686cfdd9961c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42200e054ccc00a6dff1686cfdd9961c_JaffaCakes118
-
Size
976KB
-
MD5
42200e054ccc00a6dff1686cfdd9961c
-
SHA1
ab84663c0ed571b439400f40861603269a50afd5
-
SHA256
eebae29043113927e380f244cfb562fcef9c0f65765edeac8603eb604fd05be5
-
SHA512
a0e8b98d9fe31e423058f575f2371fe3799b9e43978b2da41c65fccd638cf01f09765d174f54c5807a4ff3d6438a4777845238d8bb01e45cfb35b010a6a37df3
-
SSDEEP
24576:41lI12Yb79y4QqOV9L/flCp/wFxqlni5XNC21oAN:4vINb784Pa9L/Nunw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42200e054ccc00a6dff1686cfdd9961c_JaffaCakes118
Files
-
42200e054ccc00a6dff1686cfdd9961c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 571KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE