Static task
static1
Behavioral task
behavioral1
Sample
6169cb8329b27e3727ffd4d97ec30fb5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6169cb8329b27e3727ffd4d97ec30fb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6169cb8329b27e3727ffd4d97ec30fb5_JaffaCakes118
-
Size
257KB
-
MD5
6169cb8329b27e3727ffd4d97ec30fb5
-
SHA1
6ea091ee9c10abd5a6e5ffc3c4196deb7da1f096
-
SHA256
7b99ca489ae69427a7444200f108949f4e803fd22700d667d75a206222ce32e5
-
SHA512
f52e347f3f14159c7dc5a56700e22133ac9d215ca986f2a855e6249e07634c1c48c9ce1b05c34aac3af2ac50af3c73bd05385bd7ed5a0a1788c524d2d9a6871b
-
SSDEEP
6144:4DBj6B6kQu1WTminflPN80PxpkJP9sF2GtxvEvCOQjW7:4s6k+Tmin80PPesFFxMvqa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6169cb8329b27e3727ffd4d97ec30fb5_JaffaCakes118
Files
-
6169cb8329b27e3727ffd4d97ec30fb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE