Static task
static1
Behavioral task
behavioral1
Sample
75470a3965fa0749abb1f9e0c5a3643f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75470a3965fa0749abb1f9e0c5a3643f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75470a3965fa0749abb1f9e0c5a3643f_JaffaCakes118
-
Size
44KB
-
MD5
75470a3965fa0749abb1f9e0c5a3643f
-
SHA1
9c4f80b64512b54e35844af6e7235fffbb1a971f
-
SHA256
27a0015391884b143dce5c78bdb5bdccfa603583c10865106e6fc03ecb367bf1
-
SHA512
abfbe8af28d7debb99b2e1d1ae4749ccac49b386115f0c754ef300b0f8a4462acf62b9e42a385f3770162ebc9f7db92ba87e47f27b726adbf84ef52c59cec11c
-
SSDEEP
768:n9S2cWxfdSW5DXGXMu+kj59R9K+0vssIktTfIyM/Km4tIsEGRI9XmIqiLtEg6P6a:n02cGwW9mM6rQsbktDIVCm4tJEGWk49M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75470a3965fa0749abb1f9e0c5a3643f_JaffaCakes118
Files
-
75470a3965fa0749abb1f9e0c5a3643f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE