Static task
static1
Behavioral task
behavioral1
Sample
7589b6c6c8a95c0849b78789f140091d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7589b6c6c8a95c0849b78789f140091d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7589b6c6c8a95c0849b78789f140091d_JaffaCakes118
-
Size
3.8MB
-
MD5
7589b6c6c8a95c0849b78789f140091d
-
SHA1
81ff44d36da0b27d21b8cdb6d4b2e0bd221a38fc
-
SHA256
17cac6e187de22d1bab6282ff91add7b7eee8563ffff229b1a69360b896dcedd
-
SHA512
25c7cf073f15fd0a0ce14a3cc77bf0c52793b16a3512e374c692df61f6dbb72bcde572c87ef3ccd2221237e29af54388190032766dedd66c11dd4d9529cdf6d7
-
SSDEEP
98304:XDTdRXYWlrhZf3s1QKjHQRnV2cs61btJad4+:XDTdRXYWlrhV3sZQFRbtJaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7589b6c6c8a95c0849b78789f140091d_JaffaCakes118
Files
-
7589b6c6c8a95c0849b78789f140091d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE