Static task
static1
Behavioral task
behavioral1
Sample
4a92b54b6b53a694c865c4071933f8bf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a92b54b6b53a694c865c4071933f8bf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a92b54b6b53a694c865c4071933f8bf_JaffaCakes118
-
Size
410KB
-
MD5
4a92b54b6b53a694c865c4071933f8bf
-
SHA1
d5abfdd1b94dee910e8b56c6b1ad2a52b90266d1
-
SHA256
6dfe8d9ce8d131a23e33447dbb3656232e54f4b276022e96fd28c24d28dd6eeb
-
SHA512
956b36b3207c5b6124928a27f6f4f765f194a1c587effef96ab4e44b8f948f4002aa093b42dbf53e1f4e87cd2229014ba1d371c7b11dcc2888433c51705f79bc
-
SSDEEP
12288:QPHqJonCaD5dXmyllzke1vtd4d8gkDukSO4:QPKwD5dXmyH/1Fd4dDkDuX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a92b54b6b53a694c865c4071933f8bf_JaffaCakes118
Files
-
4a92b54b6b53a694c865c4071933f8bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 402KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE