Static task
static1
Behavioral task
behavioral1
Sample
960495b6cfc6dbbfed66e7a3384a75a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
960495b6cfc6dbbfed66e7a3384a75a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
960495b6cfc6dbbfed66e7a3384a75a8_JaffaCakes118
-
Size
68KB
-
MD5
960495b6cfc6dbbfed66e7a3384a75a8
-
SHA1
e4b33a68f2c070885b0cb1553ba6827b55126b76
-
SHA256
f6dd6b71896aa868ef5ee95d276fd443cadfb9c70a383fda44dec82ba8a5220f
-
SHA512
72f88509e072dc9914bdd40c1540db70b460f94a1ec1fe112c48c8ebd1fdc3fa8b2200fe6b48398b6088a776d35b262df4a8d6f9995f8a850f4f209931f4b12e
-
SSDEEP
384:wx0CcxqjIGXQGX9j6OXxJx1JrssHCaxOrbyQwio6m3zIXki/oytAxgr6+e9Pfqbi:1CYqjLQwh6MoscbyQwJ/jYsxHha5E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 960495b6cfc6dbbfed66e7a3384a75a8_JaffaCakes118
Files
-
960495b6cfc6dbbfed66e7a3384a75a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE