Static task
static1
Behavioral task
behavioral1
Sample
a4da1e306fd2c432ad2b7562e71805b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4da1e306fd2c432ad2b7562e71805b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4da1e306fd2c432ad2b7562e71805b8_JaffaCakes118
-
Size
295KB
-
MD5
a4da1e306fd2c432ad2b7562e71805b8
-
SHA1
611149f74230bf17fb9df844665cca1cb8370cfe
-
SHA256
c31d353b15052c8f7afd6ab8761db8f24e04fed2662d85e5450708038b51a2cf
-
SHA512
4b9cec3576374586d7d50e152ded9ae78946a18f0e325db4f12bcfeb48a876c8c35f74b7cd94683b8f46abe2f8f9cd825594b4b75221f72e335a91a6508131dc
-
SSDEEP
6144:JD0yGE6rmM4F7RBk5xKkdrZ5KwR4T5bGhw5fu8GtRjd9yktH98rkYffA1vU:SyGE6rm9F1BkfKQ5jWA8Gt79ykV98lf9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4da1e306fd2c432ad2b7562e71805b8_JaffaCakes118
Files
-
a4da1e306fd2c432ad2b7562e71805b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE