Static task
static1
Behavioral task
behavioral1
Sample
65e321085dfb8ab1a4b997f6c39dbd85_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65e321085dfb8ab1a4b997f6c39dbd85_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65e321085dfb8ab1a4b997f6c39dbd85_JaffaCakes118
-
Size
116KB
-
MD5
65e321085dfb8ab1a4b997f6c39dbd85
-
SHA1
b03742d904df4bc0df8cffe8f78db46c9a3be994
-
SHA256
c778418e076c09f551da12f955c48e58a5291b63b784e020f2f767977e7f13e6
-
SHA512
92b20b47173bad37640bdcab463734c9e9b458462fe09bd6e5fb5c1e5194a83dcbe1c0a0391b63fd3a1b00e23963bb11f13e6d2fbccbd5b2c7a1147ac2bff38a
-
SSDEEP
1536:XlYSgXi/x+LY22S0UyoRpZWHEDGpuRdg9:XlYSgXCwh2S0UJwHN0RK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e321085dfb8ab1a4b997f6c39dbd85_JaffaCakes118
Files
-
65e321085dfb8ab1a4b997f6c39dbd85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE