Static task
static1
Behavioral task
behavioral1
Sample
8cff1614ac0e58d3d0a97ac79586cccf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8cff1614ac0e58d3d0a97ac79586cccf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cff1614ac0e58d3d0a97ac79586cccf_JaffaCakes118
-
Size
60KB
-
MD5
8cff1614ac0e58d3d0a97ac79586cccf
-
SHA1
143d6a34bff0a2cabc0bdbb1ff58a46baf9a91a7
-
SHA256
6d50ed5947560385e9685aee10f453a2761b3b5089bd9207c26bb5bf685a2794
-
SHA512
c9f4b5451585c27ab92d9d973813f33cff796b17ff5279ed0c8edd41e291620b4d5dd9ddcda3dd2eff6473fa5dd85dd3a049d2e74dbadba0e5ee733e49462303
-
SSDEEP
1536:ycx/O2U2Bvzd5+uj5IlBf1E/3ZSagiqCA:VGRUjFIRE/MrBCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cff1614ac0e58d3d0a97ac79586cccf_JaffaCakes118
Files
-
8cff1614ac0e58d3d0a97ac79586cccf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE