Static task
static1
Behavioral task
behavioral1
Sample
77a8b08b684d3904166b0eba5abba3c6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
77a8b08b684d3904166b0eba5abba3c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77a8b08b684d3904166b0eba5abba3c6_JaffaCakes118
-
Size
257KB
-
MD5
77a8b08b684d3904166b0eba5abba3c6
-
SHA1
8c61ea428cd389d453252227b1ef4da3fd28ea47
-
SHA256
f03d31ac31694d487c4260d929b39882202eeb580b9d2d5a17e684075c36c7ff
-
SHA512
b0df951dbc61fb7da4cbb7dd2f9062da162c3c74d22bcc4bf6b685c47430d5ea6ce3b1dd7de48e66c614111c7a08702f20748edb804dedf5230844a882406891
-
SSDEEP
6144:MTdI0O7cWOt+SB2YaJ4VHAfBduItol08gjS580F/ktxf4RgJofx:YLXQSB2iCBAUsg280CfAmyx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77a8b08b684d3904166b0eba5abba3c6_JaffaCakes118
Files
-
77a8b08b684d3904166b0eba5abba3c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 12.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE