Static task
static1
Behavioral task
behavioral1
Sample
85233f266bd2efde2c0fbcd3e685cc1d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
85233f266bd2efde2c0fbcd3e685cc1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85233f266bd2efde2c0fbcd3e685cc1d_JaffaCakes118
-
Size
1.1MB
-
MD5
85233f266bd2efde2c0fbcd3e685cc1d
-
SHA1
1b27bbe505721a683d6e80951f5e746dd9b1693c
-
SHA256
1d6aadf4c6febd3621704973364ffc1aad902aed025d84d97c9778cbf04e67f4
-
SHA512
f3d570c6472f60d2c0bde8775f0ba9681deb954db05e09b9556309fa4a7a504f5fd266e7bad3a60fb004abe66320b56b60ea3e36d49d315e850b0bd517f914b7
-
SSDEEP
24576:WRQ4B2085lzfVsh8dva5U07wVd1knwULP1Hx:WRFk08uhuvabYWnwULdHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85233f266bd2efde2c0fbcd3e685cc1d_JaffaCakes118
Files
-
85233f266bd2efde2c0fbcd3e685cc1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE