Static task
static1
Behavioral task
behavioral1
Sample
8b9cb00cedd8edfe1a221b802964ca08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b9cb00cedd8edfe1a221b802964ca08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b9cb00cedd8edfe1a221b802964ca08_JaffaCakes118
-
Size
84KB
-
MD5
8b9cb00cedd8edfe1a221b802964ca08
-
SHA1
e88ec34725de4a7922e1d59d10169983068605bc
-
SHA256
91de4627b48dab54d811b57e1c6f93e402149cb93e29a61e799a9d2aad1ab162
-
SHA512
6a7da576fc6f415bd377cf0b094c08820e971cfa6b9c227a61d34061e7e31b167c22d071e3011f27ec866d63adb071bf80401f58f3fff02df3eb8f6a5a982788
-
SSDEEP
1536:F2lRZVvf26v+uBVbDDVMLJo7n8vKIVL4mdZ61lgv2RXuHrxgCyJ0s:FkRZdR+un/E6eKI94sZ61OeEHtmCs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b9cb00cedd8edfe1a221b802964ca08_JaffaCakes118
Files
-
8b9cb00cedd8edfe1a221b802964ca08_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE