Static task
static1
Behavioral task
behavioral1
Sample
71a8f618331f8188e4d07b0427506a1f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71a8f618331f8188e4d07b0427506a1f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71a8f618331f8188e4d07b0427506a1f_JaffaCakes118
-
Size
238KB
-
MD5
71a8f618331f8188e4d07b0427506a1f
-
SHA1
3e55b147687776a28b698a1615cb9dbccadf2df1
-
SHA256
e736aa1828922a92a512f8eb80d546b1e84a220697f927845d843a4cfcd92924
-
SHA512
dd690c8f0f5a049976986c21df26b6a031da3898a807ebd276963c88fb483ceb92a4a62e90c2cfa98a4751ed476378294f577c2c43d62bbd2b2e6495aa001e8a
-
SSDEEP
6144:qaskYKHj7JoTcukPy35eTEP2plgyE8+0nCwFB:qHkzRoTLYy3m+sSPwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71a8f618331f8188e4d07b0427506a1f_JaffaCakes118
Files
-
71a8f618331f8188e4d07b0427506a1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE