Static task
static1
Behavioral task
behavioral1
Sample
a975c44d4b64c3860500a4ab1d502294_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a975c44d4b64c3860500a4ab1d502294_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a975c44d4b64c3860500a4ab1d502294_JaffaCakes118
-
Size
1.8MB
-
MD5
a975c44d4b64c3860500a4ab1d502294
-
SHA1
7cbeda21183a1f27c43ebc1bc8d1887665793250
-
SHA256
dab9d209a5a56a06e5855a36526003ad1e5bff4f4bf2ef258017ebee0b08e684
-
SHA512
625d590ce7d5f73ce5f89c3ac0edfa0d3e0b8d021d9691a6cf2dbd7a9f62442cc42c06c1ecb35e635a9f9ab991f78510d410f89ff34f5d0af254cc4dd8e349b4
-
SSDEEP
49152:QzRPgu0gCGPeDW4fwVw2vNxCSt8uugGmc1Uo1M+mm4Gx4FBj:QzyiCGPGWoQcS+Qno1MBMUBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a975c44d4b64c3860500a4ab1d502294_JaffaCakes118
Files
-
a975c44d4b64c3860500a4ab1d502294_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE