Static task
static1
Behavioral task
behavioral1
Sample
6a9a93456ebd544d50f53c9d7379b274_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a9a93456ebd544d50f53c9d7379b274_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a9a93456ebd544d50f53c9d7379b274_JaffaCakes118
-
Size
44KB
-
MD5
6a9a93456ebd544d50f53c9d7379b274
-
SHA1
977bcb5c67c3c3e31f676e2bf777fcf4accf8928
-
SHA256
1f5438c0076a9d08c56150428a6a9e5b31148ca99743ec5a9073efad8a39514d
-
SHA512
ccfdbd6a55c1728b310e96681b15f69dacb7a7c973e92c168811a1d5d35cf9636ff1bd4d1af9b9ac437f54052c12e97638e9860a0414b2ed89724ddaaf283884
-
SSDEEP
768:D28HXs++xEKdizWy3mYWlGpDh12DrPysEeaqPDq2gFkzM1VlWiY:D2831+xaD2flOh/e5PD9oyM1VciY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9a93456ebd544d50f53c9d7379b274_JaffaCakes118
Files
-
6a9a93456ebd544d50f53c9d7379b274_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE