Static task
static1
Behavioral task
behavioral1
Sample
9461e104ee0025512c20871a0a3750a9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9461e104ee0025512c20871a0a3750a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9461e104ee0025512c20871a0a3750a9_JaffaCakes118
-
Size
264KB
-
MD5
9461e104ee0025512c20871a0a3750a9
-
SHA1
1c827592de2e22901d277284bced63856511b96d
-
SHA256
2a7aa3363946cb1d2f64880f5de8def5f98f1595a60548a7e59446db14c9181a
-
SHA512
9ca8086c35c4380ab5f5384cc23b75ee5b5a16f4b96aeae1122b452e2a05168e48a18a6c39cc4b2a68e3d4fb9a6babfe317de78187c5f78e7a13e2f1cd7d13e8
-
SSDEEP
6:idqmvVg3F+X32GUd53u6m9kmHjYbblXA6IuMymXqoQ:e9GSGGUd5392HjYHixuMyj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9461e104ee0025512c20871a0a3750a9_JaffaCakes118
Files
-
9461e104ee0025512c20871a0a3750a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE