Static task
static1
Behavioral task
behavioral1
Sample
623bba882843a6dac3e7f6fbde3f5d97_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
623bba882843a6dac3e7f6fbde3f5d97_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
623bba882843a6dac3e7f6fbde3f5d97_JaffaCakes118
-
Size
19KB
-
MD5
623bba882843a6dac3e7f6fbde3f5d97
-
SHA1
df1afa7e68da39cbd51fd8fc6e9f5c1352a0bda4
-
SHA256
9b49d67de03e6305e0f0b5134572971c801e6fa3d462785c46c1fdb272946227
-
SHA512
100fc9fc6bc692f6e828d8429018d930d3a7acb7006eecb6a57ec54007f62f45fc4443e0127c45bf4b5782091f7b1ee5f2853194c257f77e87acf3d5f0640564
-
SSDEEP
384:CchWHr2vDuHxFUz3ZFOS3w9gUpyP6PavHjIzTMMQsk2F5/m4bje5:CcEHr26HzGJQt9gToqgl1kE/mqi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 623bba882843a6dac3e7f6fbde3f5d97_JaffaCakes118
Files
-
623bba882843a6dac3e7f6fbde3f5d97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE