Static task
static1
Behavioral task
behavioral1
Sample
601685e15a2e0015b5ec933f67552521_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
601685e15a2e0015b5ec933f67552521_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
601685e15a2e0015b5ec933f67552521_JaffaCakes118
-
Size
72KB
-
MD5
601685e15a2e0015b5ec933f67552521
-
SHA1
c4bd96415b781f6eec5f1edc277742ac4fcc37c1
-
SHA256
0857b7c099ae5da3ffb3a13f52fded83e4f5c39223f27f5cfe0f1c8eebe24923
-
SHA512
af66b4201be4c7c42e17eecd2f8e1255cc9b15041ed99e0486eb69e08f35866f6307c1bc2561a9b9d469700a6533b67ebc2a3a208ae1617a78519412b0294622
-
SSDEEP
768:cxZPFuWLoMLmWaZGiAamysgy2hZY1+Zv9OgYB651FuWSo6P:cxZF0MLcGss72hgKlP7rSFP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 601685e15a2e0015b5ec933f67552521_JaffaCakes118
Files
-
601685e15a2e0015b5ec933f67552521_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE