Static task
static1
Behavioral task
behavioral1
Sample
a6b2b89cf357fda2e76145357f481e7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6b2b89cf357fda2e76145357f481e7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6b2b89cf357fda2e76145357f481e7b_JaffaCakes118
-
Size
157KB
-
MD5
a6b2b89cf357fda2e76145357f481e7b
-
SHA1
ec6ca7c95a859858072974ee2183734887e7ec0f
-
SHA256
8668228dcb7032fac695c0eb20d9fd23f384a4ea147a2165d4760b089ee9bd9f
-
SHA512
496951f4078cffa2c200dc52ca173cef06c5aba81b5939c59159b70e2a509cb337bc63477ea306d52d0f8ebdf0304affa5da7bb96155f02024e6eb7561586dea
-
SSDEEP
3072:At22e/M9vXOCDTUX8c8XD0E4gVGu+jfAIto/ESg0:AtGM9v1DW8cEgoVcj78Bp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6b2b89cf357fda2e76145357f481e7b_JaffaCakes118
Files
-
a6b2b89cf357fda2e76145357f481e7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE