Static task
static1
Behavioral task
behavioral1
Sample
85af6cfcc4f7a079f2e71459ad9f7775_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
85af6cfcc4f7a079f2e71459ad9f7775_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85af6cfcc4f7a079f2e71459ad9f7775_JaffaCakes118
-
Size
213KB
-
MD5
85af6cfcc4f7a079f2e71459ad9f7775
-
SHA1
3d2561eda729ea171312ec2ea5c1c5a89e0d9b0e
-
SHA256
0537680726e91ade13c783b2a7fe4c2c1631e04eeaa43931b28a3325f032053d
-
SHA512
8be9ad5eebfd5549bd862eac7e8299ea1edd9bebb201f6399ba01f8d6b919837d8ea3c184908d9e0e6b429a5f6cd37066ef3b5ebd78f94ddc4d73b9b3e318d69
-
SSDEEP
3072:aN710ShWyiOloEcEjQa5Sn1KyWXjQCPnM0Hma7rsQdFFuJB+Zv8cij3SeddpCPBO:o7mgW5k4EXjtBH7sgOGZvGj3Sedv6+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85af6cfcc4f7a079f2e71459ad9f7775_JaffaCakes118
Files
-
85af6cfcc4f7a079f2e71459ad9f7775_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 212KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE