Static task
static1
Behavioral task
behavioral1
Sample
acf80e5c7e358882d84d2c3aab2e24b8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
acf80e5c7e358882d84d2c3aab2e24b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acf80e5c7e358882d84d2c3aab2e24b8_JaffaCakes118
-
Size
225KB
-
MD5
acf80e5c7e358882d84d2c3aab2e24b8
-
SHA1
fd65fcd61f3092a02a358493405b64310c2267f2
-
SHA256
f912e2aba23e887d8106a8a6297ba4b5cf001a14ccbc1fc208cf0f09c18dd66f
-
SHA512
c75d2bc4b4eef757a5420428c6597ef3bef7a6e5aa7e9144d884041a94cf536cf045f6c2e8c797f840ab00af480302c8b78758e5500e537ca65aa89c872f4f7f
-
SSDEEP
6144:1rNf92gHBd46RR0pyuSRmTcRrooSMgKE2nBw/FW2H3BAM:1rNf8Wd7njRXooSIEEBw/FpD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acf80e5c7e358882d84d2c3aab2e24b8_JaffaCakes118
Files
-
acf80e5c7e358882d84d2c3aab2e24b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 224KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE