Static task
static1
Behavioral task
behavioral1
Sample
a8e1fbba2f8c50bd835d28b1b7de8497_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8e1fbba2f8c50bd835d28b1b7de8497_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8e1fbba2f8c50bd835d28b1b7de8497_JaffaCakes118
-
Size
1.4MB
-
MD5
a8e1fbba2f8c50bd835d28b1b7de8497
-
SHA1
87381391974a77d482fdca1a51b5fc411b6b867d
-
SHA256
ecb70d249ea5489a16fabf41c3a7592aac9f2baa41f95b0ca24bd12e3b59bf79
-
SHA512
2d59baf7d83ed2b70899067caeab653950154db2a168d81b2287f5286b4e026d98ce88659d91fb70ae5e03ef7e36c08e3666415499d1cf4e41734a09dc52b476
-
SSDEEP
24576:2Qr6B2S7JAeQmZZrixYms7RGWMf11Td7j08DaBbvMvq2YuiF2uAWeoi4hraGSC7D:2QI7J1Qm2Gms7cfdZoQaBbvMvpqomrLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8e1fbba2f8c50bd835d28b1b7de8497_JaffaCakes118
Files
-
a8e1fbba2f8c50bd835d28b1b7de8497_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE