Static task
static1
Behavioral task
behavioral1
Sample
675c7cfae419a8f951da5ea7fedb61fc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
675c7cfae419a8f951da5ea7fedb61fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
675c7cfae419a8f951da5ea7fedb61fc_JaffaCakes118
-
Size
25KB
-
MD5
675c7cfae419a8f951da5ea7fedb61fc
-
SHA1
a15a8f8a332abf220d544c47c073c353eb16fbd4
-
SHA256
cab7ca73bc5003bf4f2b0d6baa29219a738cbe4b52b6013fd10671e05c2edfe6
-
SHA512
36374ea68b4d7c701bcfabf1d1941ac0f9a6af09ae7eb5c732cb6bacef4a403bf24e325b20e10c6aad6b4f157bc99cc667518da25dcbdaa224e3e7d8a95785a5
-
SSDEEP
384:4Oi8uR2vD256Dl4pXJYtcgqlMzcEAT8aVIxNNmMniei6i12VXb1H:XUR2i5/XJYqgIMzc3kq12z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675c7cfae419a8f951da5ea7fedb61fc_JaffaCakes118
Files
-
675c7cfae419a8f951da5ea7fedb61fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE