Static task
static1
Behavioral task
behavioral1
Sample
a5107d2554d9751791f002afaac8e901_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5107d2554d9751791f002afaac8e901_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5107d2554d9751791f002afaac8e901_JaffaCakes118
-
Size
65KB
-
MD5
a5107d2554d9751791f002afaac8e901
-
SHA1
8e47cd7f71c1765ea1dc34a815732ebb2315fa1e
-
SHA256
a7de1bbee6cc284196064e28350299c64bd404df897eab1027665f5787668248
-
SHA512
7b824a825d92e1589cc1a62076daef77a359891e2ef43c25cf6e023fdd7639fda8e1fdae7a07333ba1caa5354d940b79cb1a2178fb6da47fe4caec63762ff692
-
SSDEEP
1536:V8t2ayYNKpFCI5FOr+6CS2kDRWtxpi60YtawW:V8t5yQUMUOrzP/lYXTawW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5107d2554d9751791f002afaac8e901_JaffaCakes118
Files
-
a5107d2554d9751791f002afaac8e901_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE