Static task
static1
Behavioral task
behavioral1
Sample
485af7ee0531c3b3f0982b8a449f1ed6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
485af7ee0531c3b3f0982b8a449f1ed6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
485af7ee0531c3b3f0982b8a449f1ed6_JaffaCakes118
-
Size
102KB
-
MD5
485af7ee0531c3b3f0982b8a449f1ed6
-
SHA1
71fcfe95f4fefe3d40565f2e3b32e7a63a98af27
-
SHA256
978c06d69f95f6a4a0da9849f38b0b86d36092e6df93d5916a03467dc33ae137
-
SHA512
2a3263e9d2b8abeffdeb89272f4314d196b2a9a3fd1e5d09acab702862d0d027efd06829bce955feb1973a28421cd1646f52358d0a4c85039d94c2777a4962c1
-
SSDEEP
1536:MmJoW0OU2cv7vLM5ALz1F4tSe2OS0pzphXx/Wt1034+4w5Qrbbkw6aBi22Wt4rRp:MmKW0OUn7vLMuF4serZTO0340q5WeDmZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485af7ee0531c3b3f0982b8a449f1ed6_JaffaCakes118
Files
-
485af7ee0531c3b3f0982b8a449f1ed6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE