Static task
static1
Behavioral task
behavioral1
Sample
aa7f376496863ea263eb0d55094452f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa7f376496863ea263eb0d55094452f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa7f376496863ea263eb0d55094452f9_JaffaCakes118
-
Size
26KB
-
MD5
aa7f376496863ea263eb0d55094452f9
-
SHA1
b5c486daa7bc33b31dc2e163f8134fc20f8d8243
-
SHA256
f469fbc6bc0bd2218453c72daf4f6e82803c22139ca511331697b707f0bfca92
-
SHA512
8756c33c4add3ba10da2c5a6d854d179ac29a97f6329f56c5ecc1e979be11e86e96b18ee9e275d049a59a0956927d070f2abcb5eebe0dff199f7adc9fb56c998
-
SSDEEP
384:QzvmGOuVB9xinSWpETWr/7eYV24xLLCwTlHCErPWzm5gU3GjDTLijn4Q5tZFzQ0q:2mqqMWuYEEL2Wy656DAtf3J3uBHE8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7f376496863ea263eb0d55094452f9_JaffaCakes118
Files
-
aa7f376496863ea263eb0d55094452f9_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE