Static task
static1
Behavioral task
behavioral1
Sample
a6cfdaef7d193f20627940718cf25700_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6cfdaef7d193f20627940718cf25700_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6cfdaef7d193f20627940718cf25700_JaffaCakes118
-
Size
270KB
-
MD5
a6cfdaef7d193f20627940718cf25700
-
SHA1
43ba571e4b9e9cd481be3ac6cfdf4faa186f3f17
-
SHA256
c64bb8e4b51ddb2a90737dd1e304879006d4ee5f9d614d26e98c334e2119d6da
-
SHA512
50edb8a841ee61a4d81d06ea55c00be5823faf2c9a72c3e9b6cc79e5bf4e5548ee48c9528b0b0eef588a80f8460cb059bd948532295314860c00e2cb06346daf
-
SSDEEP
6144:DMmBj6B6kP/KRvA9HmNR92bIjLxPTYra385tnDzeO+SsZPqXhEW:YV6kPIA9mR9jXZkznXL+C1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6cfdaef7d193f20627940718cf25700_JaffaCakes118
Files
-
a6cfdaef7d193f20627940718cf25700_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE