Static task
static1
Behavioral task
behavioral1
Sample
71c98b2dbc942d3be119debd99e8c571_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71c98b2dbc942d3be119debd99e8c571_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71c98b2dbc942d3be119debd99e8c571_JaffaCakes118
-
Size
54KB
-
MD5
71c98b2dbc942d3be119debd99e8c571
-
SHA1
a570a5fb4689162b9b6c2085a87b4aa97c37daf8
-
SHA256
57e919c00bea8903e4321376e8d99d236da833bc43cd290abb8c9d002733d72f
-
SHA512
51b1aa254e9cd175a1990a0b4bddfa9b0422a2e04491985d11e8a713e5d6df5c41e5d31470cd757f374ddab29abdaaf5a9b0642486285f429a1a46d23c90320f
-
SSDEEP
1536:YpAygD4t2vkXPxIfraxIKLjqC5F9egpKd0ANB:Ye4tlPm+ah09egAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c98b2dbc942d3be119debd99e8c571_JaffaCakes118
Files
-
71c98b2dbc942d3be119debd99e8c571_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE