Static task
static1
Behavioral task
behavioral1
Sample
6159b861a0cc1c5900fd01364fb8dc89_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6159b861a0cc1c5900fd01364fb8dc89_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6159b861a0cc1c5900fd01364fb8dc89_JaffaCakes118
-
Size
457KB
-
MD5
6159b861a0cc1c5900fd01364fb8dc89
-
SHA1
e5fee4f81cb24d414dac4596f6d2f4a6c4b3917e
-
SHA256
3ddf8eb99de0bfb75a1062da10bafcc5ac1894f042ac1cdb9aac9ff1984beee4
-
SHA512
ed48b7ae8ec71d79e59c6e204962cdc54d4cd9598c0e861a66bfb73cf802b2c517c33624c472da15475e3a808ee126b083eeeba6954c4bacb236dceb81d365ca
-
SSDEEP
12288:/ov5vfwBJ9fd0+Kf/dO07lbpQ4pcvVtiFQI81Z:/6Iv9id9tpQ4mvgQxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6159b861a0cc1c5900fd01364fb8dc89_JaffaCakes118
Files
-
6159b861a0cc1c5900fd01364fb8dc89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 457KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE