Static task
static1
Behavioral task
behavioral1
Sample
ab5764cb12764e72f1f0e636b61182fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab5764cb12764e72f1f0e636b61182fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab5764cb12764e72f1f0e636b61182fc_JaffaCakes118
-
Size
330KB
-
MD5
ab5764cb12764e72f1f0e636b61182fc
-
SHA1
42f805fed1776ec1348a09deb9e7d77bab90e019
-
SHA256
289276f156030c44d71f81aa69936e59ff727b4e4557f1681d2cabb976c06273
-
SHA512
55075103632b3e7c2f148fd01b713c78de80cb3a42117665dfeb32f60ca4eb1ac4406034c1b52ee926d3052710cbd4e0e8fee12fd96b3a339c7d36eae4a3106e
-
SSDEEP
6144:nl0ygpQGscUXxdM4sgGb4qpxygWzA1mj9B+dfQtAXcKu8s:Cygpg1Xw4sgGcqDxMKu8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab5764cb12764e72f1f0e636b61182fc_JaffaCakes118
Files
-
ab5764cb12764e72f1f0e636b61182fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 329KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE