Static task
static1
Behavioral task
behavioral1
Sample
8a9b25f96b042370b3d0145d4fff72a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a9b25f96b042370b3d0145d4fff72a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a9b25f96b042370b3d0145d4fff72a5_JaffaCakes118
-
Size
322KB
-
MD5
8a9b25f96b042370b3d0145d4fff72a5
-
SHA1
793fc7eb174fe95f6582714f93ee8c3311a38616
-
SHA256
7fa3f787050dbb82e8d57514134f3e6d7c12f3227cb91da98f71c343f92b45ea
-
SHA512
b20e1edfb331680de3531e943b007998c31e9d7972310d4e1b9d5ee31d415eae3381d301fc4152904993c9150d8bbf582a494e864959c88140a791feaed9439c
-
SSDEEP
6144:eMKxYmrVQRW6v2fZJjVIoVvH5DwNAPSp+3GR3Oz1LIobAb6D5K+46XZLeYYC5v:bKxfbC2hJRIQvHpbgw4E2/b6D5NRUYRx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9b25f96b042370b3d0145d4fff72a5_JaffaCakes118
Files
-
8a9b25f96b042370b3d0145d4fff72a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE