Static task
static1
Behavioral task
behavioral1
Sample
68391480961041005f270b9e3bf8f0f3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68391480961041005f270b9e3bf8f0f3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
68391480961041005f270b9e3bf8f0f3_JaffaCakes118
-
Size
3.1MB
-
MD5
68391480961041005f270b9e3bf8f0f3
-
SHA1
bea96e79dc1b85cb5afb94d384a978189c8c2e27
-
SHA256
f0873c211932b305ba8ff7690a7386e4b1a7ba2abb32d6b69a2740f4ce57235f
-
SHA512
87abd9918e23c4a0276dcb4217593c5c207ab349a126ee2bf8b40fc1fddabb7082cfea7a061626a801c8d0ef7a880b2fea80ea43126c6380cbcc135d01e00b3a
-
SSDEEP
49152:sciU3EyTa7E75e5amAMF/aReskT1okzdyxV63u8f3+j9/KJJLdbPAZI9:sOEyTa4qamAgaRfYokqQ3+j9sxjAm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68391480961041005f270b9e3bf8f0f3_JaffaCakes118
Files
-
68391480961041005f270b9e3bf8f0f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE