Static task
static1
Behavioral task
behavioral1
Sample
62f5fc27a3a2f9fc07a74eb76b622904_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62f5fc27a3a2f9fc07a74eb76b622904_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62f5fc27a3a2f9fc07a74eb76b622904_JaffaCakes118
-
Size
382KB
-
MD5
62f5fc27a3a2f9fc07a74eb76b622904
-
SHA1
d19d731cb940bbd2bfc35c434e026c3f65fcaf45
-
SHA256
a1b6b472cc101e1381fc762bb92686f8892b481b0748205677cf2e696a5f3b8d
-
SHA512
cf0396336cc2d2146d9170ad651ec1af97b8879336dce2ba0dbac91b0e065c8ac0d018039a213d240a9e69be9714115e30864b19719163d391233cb205c982f3
-
SSDEEP
6144:OePOVWMIf5rQolJM+uHPJU/crgB2HkSOzNLbMOp3pZwDfPVPgNglLZQreenumbFd:OJWHrQolJM+omc8BGkSuFJ3mf9PBfQJH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62f5fc27a3a2f9fc07a74eb76b622904_JaffaCakes118
Files
-
62f5fc27a3a2f9fc07a74eb76b622904_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE