Static task
static1
Behavioral task
behavioral1
Sample
a6d44f0e5a09ed2aa576b90f1b20ff22_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6d44f0e5a09ed2aa576b90f1b20ff22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6d44f0e5a09ed2aa576b90f1b20ff22_JaffaCakes118
-
Size
1.1MB
-
MD5
a6d44f0e5a09ed2aa576b90f1b20ff22
-
SHA1
0823a36abf54f7a22800b81170c70a00c4d4c3eb
-
SHA256
d27ad05a373c25f6d638b769cb76aed90eaf987579b3a53a0b65aff0fdff3efd
-
SHA512
294985faeb11e5760f611accbcbf3de3cc9a66a2f4da79c3cd8f6103619de6c83af4b203d4c4e222d001f86e1343dd4b0e98ab12671a368b08959cf0352c6ef9
-
SSDEEP
24576:/lTHRBOMW5A6TvScBCGwvMs2WbOCLvJZbCiBXgf:/YTacB94PvjCKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6d44f0e5a09ed2aa576b90f1b20ff22_JaffaCakes118
Files
-
a6d44f0e5a09ed2aa576b90f1b20ff22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 808KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE