Static task
static1
Behavioral task
behavioral1
Sample
9717c9a5f492eee9a66932bc7a09dec3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9717c9a5f492eee9a66932bc7a09dec3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9717c9a5f492eee9a66932bc7a09dec3_JaffaCakes118
-
Size
22KB
-
MD5
9717c9a5f492eee9a66932bc7a09dec3
-
SHA1
791e6271f232053f2fb059341cb927ed31c04d9c
-
SHA256
00547960cfc61e007b4e1ac02b47c988c6df6c8ac0cd6f9712fae119b41ea916
-
SHA512
089c2059d295e09684b5d89c9a3da6cf4cc1ec8422499aec15903a02e8a5f1761be24c7d677f7cae872051b6e8595c92906cac8ffdde81b8a81e9c00d325a54d
-
SSDEEP
384:TL2vDThiRtMx8WIXizz3insz9H2ZaJXdEqxUaREAEDrFZK:v2BiRtU5IXiveAWwJDxYXtZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9717c9a5f492eee9a66932bc7a09dec3_JaffaCakes118
Files
-
9717c9a5f492eee9a66932bc7a09dec3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE