Static task
static1
Behavioral task
behavioral1
Sample
8a9a12113f72e5640be5a78d663b01dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a9a12113f72e5640be5a78d663b01dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a9a12113f72e5640be5a78d663b01dd_JaffaCakes118
-
Size
275KB
-
MD5
8a9a12113f72e5640be5a78d663b01dd
-
SHA1
5586f25e0302e7554c486956588fab6e7a364806
-
SHA256
cd6fe9718c82a670748839f494e25c5d4dfd412ae50101329ec11c295135c3c5
-
SHA512
f5c61a62d08a0a75d55118a2fa89594af5298b97443fd973864852bfcf26d64a100a4d2b0c028687572fa8b5daadac326fd4d3036f95348b6f550c12aca770be
-
SSDEEP
6144:lJLWgVvyEGCX/g/OIAG7G/W8LrvvirnnMG2e6aA4j1IpTevJ+cF:6CvyEGjnAI+virn3AHp/u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9a12113f72e5640be5a78d663b01dd_JaffaCakes118
Files
-
8a9a12113f72e5640be5a78d663b01dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE