Static task
static1
Behavioral task
behavioral1
Sample
5e32596a30c85928b01f230f202f613d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e32596a30c85928b01f230f202f613d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e32596a30c85928b01f230f202f613d_JaffaCakes118
-
Size
315KB
-
MD5
5e32596a30c85928b01f230f202f613d
-
SHA1
9f958d721c9f53e46cd64bb5e67636ef680163a2
-
SHA256
66f3c3da8194052920fba983b707ed83f216338224a590dc73fe0c95cfae81a7
-
SHA512
f62febdefd28ebfd72c255196018b84d89ca10fb6864e2d69b4ebf2954b4893b81293d95bee517691558bf1e12650980b289f2a728b4fa7448dc221e1d8ce09f
-
SSDEEP
6144:ejIn2U3AiCutljMous4M1TgSfeHfTF1MKj35HH8r2ewefGaeAlbOw1bI:eEnNSMZCLXZjpn8lw1AROwxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e32596a30c85928b01f230f202f613d_JaffaCakes118
Files
-
5e32596a30c85928b01f230f202f613d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE