Static task
static1
Behavioral task
behavioral1
Sample
857f1bca6203457c5643ed934a011b56_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
857f1bca6203457c5643ed934a011b56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
857f1bca6203457c5643ed934a011b56_JaffaCakes118
-
Size
471KB
-
MD5
857f1bca6203457c5643ed934a011b56
-
SHA1
4c45d14a18b2c71c286fc91bd2932f9d120f55c4
-
SHA256
55be20cdbdd802292d6ac64511dc83a87db1702893a3650309c4674742cb29bc
-
SHA512
bf0dd18c648be18fa0e9efe71816c7d0e7ac66f6f41b541c52eec4dd247e912ef7f02de99aa556c7a65ba7dd126dbbdfe716f4cc0fd7697b04004a838301f3f9
-
SSDEEP
12288:JV1ci27Bzyg+WU8e3Xu/cMh1kVJlbbG+oJTPhGE:JV0hyg3e3XkTcPbbYJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 857f1bca6203457c5643ed934a011b56_JaffaCakes118
Files
-
857f1bca6203457c5643ed934a011b56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE