Static task
static1
Behavioral task
behavioral1
Sample
5a1344a57c6b5f05f474cb30e5d93b5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a1344a57c6b5f05f474cb30e5d93b5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a1344a57c6b5f05f474cb30e5d93b5f_JaffaCakes118
-
Size
1.2MB
-
MD5
5a1344a57c6b5f05f474cb30e5d93b5f
-
SHA1
43473d7d8d673fc63b486578cf68d11471d3ae14
-
SHA256
b1a39863834b3ea1f4af59e0a5be4a9d65834a78fb2c4fa6ad5d3315b63d561d
-
SHA512
33e1915282f34c2486ac8027a2cf195a0b7f2170bb351726b2b600b69d9411b0b703aa767422cd4c0d6668cf52ae775530e3b905ca4b799ac415dd9db348fc85
-
SSDEEP
24576:Px3kdbJAe0QQ0OmJQa7Uf0N6F9amlov8//yY3TLf6DJHP4Zq:Px3i6HQQ1myI7kF0KoCyYTaJwZq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a1344a57c6b5f05f474cb30e5d93b5f_JaffaCakes118
Files
-
5a1344a57c6b5f05f474cb30e5d93b5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 631KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE