Static task
static1
Behavioral task
behavioral1
Sample
73f041fae3e13c3e55c68149e79f1725_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73f041fae3e13c3e55c68149e79f1725_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73f041fae3e13c3e55c68149e79f1725_JaffaCakes118
-
Size
560KB
-
MD5
73f041fae3e13c3e55c68149e79f1725
-
SHA1
d23ca1cd3baedb6dcd4e65ca56a0dfc7b7c5140d
-
SHA256
1d3fff3e62ec205bfca65c384d22db84f1bb8fa5f7a94b7a111992fc86db0a1e
-
SHA512
a40498b59bd0d9fab308adf9ff25c9ae1b5ffe9cc795eb666ae99e30deee2b4ac3a6ec35b11f5bd4bbe7c7032e82b7f3268e43f97d66e1add362f082a780a46a
-
SSDEEP
6144:gNeqG8oFPSK5yImAa+JoBBOUHQlkeSBENecaFKmRdT39xBH:gNemohSmyNV/OWQueSBEsHKmnTrF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73f041fae3e13c3e55c68149e79f1725_JaffaCakes118
Files
-
73f041fae3e13c3e55c68149e79f1725_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp3 Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp4 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE