Static task
static1
Behavioral task
behavioral1
Sample
489da2d953313b04eddfb2c6532cb1df_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
489da2d953313b04eddfb2c6532cb1df_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
489da2d953313b04eddfb2c6532cb1df_JaffaCakes118
-
Size
68KB
-
MD5
489da2d953313b04eddfb2c6532cb1df
-
SHA1
53b740cc224538f885a137a2244a8197cf9c42dc
-
SHA256
a212e75213c9d6f50958e7b28858c1a031adcd87201697ebedb72e03ec51da4e
-
SHA512
237e1181bace515d0a3c0e4f5db221c88cc8f61c5ab5c0286cfee02cb3b438729070f966047d528fa25b4106a5d9ee5b2989176a575756d9115765d8e972bcab
-
SSDEEP
1536:MS/4DDE4sjnyUL7eQyl/2P5/6LKjbBT3jZtcHS:MS/4DDEifl/WN6LKjbdbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 489da2d953313b04eddfb2c6532cb1df_JaffaCakes118
Files
-
489da2d953313b04eddfb2c6532cb1df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE