Static task
static1
Behavioral task
behavioral1
Sample
5a7a6f3fb4017e2dbbdc75157754001c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a7a6f3fb4017e2dbbdc75157754001c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a7a6f3fb4017e2dbbdc75157754001c_JaffaCakes118
-
Size
318KB
-
MD5
5a7a6f3fb4017e2dbbdc75157754001c
-
SHA1
fbae1b224436b37f931717f4d4b81c1ca6b5dc6d
-
SHA256
4734d0171c63e379c386afd2503d67adb59ec1aa11e30f6191297e1059bc6335
-
SHA512
2f04096e8c11627e40d2385df505c51614190807123988fa27f12fba6fe517e7ceb671d13dbf96702c5772d85ef20b58093b517365df4d091d37761b0a4892a6
-
SSDEEP
6144:XWpuVJc2GyKo43ZImbxRf7OE/fM1nkQGyIEj3MhM0DceMGhHtknMkV:XWYVLnKoaZttRf7xQGaD4MAYGH+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7a6f3fb4017e2dbbdc75157754001c_JaffaCakes118
Files
-
5a7a6f3fb4017e2dbbdc75157754001c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE