Static task
static1
Behavioral task
behavioral1
Sample
686c4781a7162d54f20bb6dd10c81c76_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
686c4781a7162d54f20bb6dd10c81c76_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
686c4781a7162d54f20bb6dd10c81c76_JaffaCakes118
-
Size
104KB
-
MD5
686c4781a7162d54f20bb6dd10c81c76
-
SHA1
5b3534b22bb272f634840e940b73603d9070b5eb
-
SHA256
cae00c5d5aea84f8fc4e4398d3b133c58d56a206c7742f4a967638c278ad6b08
-
SHA512
eca0142181c885cafdd8bd627b53a783d02deb167019ab0cf6163edcd76bbb945cb26eefda75fb0c3214242a912771ffb565586a0c68b94e0e3c7ce356d9d3ea
-
SSDEEP
1536:2OWJyox9YFIK0/szzlFcy8G5UBGY+w/MCxvP/C2B7y1pZo9k+tjneVnc7:2uox9YbusTcy9Rw/h5qp1vo9kct7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 686c4781a7162d54f20bb6dd10c81c76_JaffaCakes118
Files
-
686c4781a7162d54f20bb6dd10c81c76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE