Static task
static1
Behavioral task
behavioral1
Sample
65b4f00f6cb048cf5fc2097912773901_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65b4f00f6cb048cf5fc2097912773901_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65b4f00f6cb048cf5fc2097912773901_JaffaCakes118
-
Size
437KB
-
MD5
65b4f00f6cb048cf5fc2097912773901
-
SHA1
99208b9f86ae7d555060fd44c61ad741e20ebb8d
-
SHA256
3328f85c35e6e827f43b3262f55caa049cb327f621821dce279b6695e48c5f59
-
SHA512
3dc3d5f3ace9735c320000104c881cadd43712039811f704c06d822021e6f59499fe22017f00962f0c33880d66aa3e59ffe3a161c4f8194ccfbe2d9cf0d90f75
-
SSDEEP
6144:S/QbwvHZyOGFHCeDgJoPYx9eLEezKpT6c6ze3rbZiEW6/d2cUk4+z+FUFBpacvLA:avFgi+g4dLOt1W6oc34y+CFRLoEK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b4f00f6cb048cf5fc2097912773901_JaffaCakes118
Files
-
65b4f00f6cb048cf5fc2097912773901_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 436KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE