Static task
static1
Behavioral task
behavioral1
Sample
757a509eab6c477df1e16f558400f920_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
757a509eab6c477df1e16f558400f920_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
757a509eab6c477df1e16f558400f920_JaffaCakes118
-
Size
270KB
-
MD5
757a509eab6c477df1e16f558400f920
-
SHA1
d8690a6e2e478e6388a49ce51ab21c5860eef679
-
SHA256
50a5a1ad84a8238ad0baae9be2aaad2f054d2a37207b663d6de1f251263dc3d0
-
SHA512
cfbe5f90bcec37167bfc59f9aea81235d7a4908874c950a1f3af7597822b111a3ccd896283f9ea016dd294b6323f665db36d7f4251440796a4115f64b0c57bda
-
SSDEEP
6144:M8nBj6B6kQu1WTminflPN80PxpkJP9sF2GtxvEvCO0HF7:1Q6k+Tmin80PPesFFxMvS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 757a509eab6c477df1e16f558400f920_JaffaCakes118
Files
-
757a509eab6c477df1e16f558400f920_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE