Static task
static1
Behavioral task
behavioral1
Sample
ac495109c8f07f59e715cd91666215c1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ac495109c8f07f59e715cd91666215c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac495109c8f07f59e715cd91666215c1_JaffaCakes118
-
Size
106KB
-
MD5
ac495109c8f07f59e715cd91666215c1
-
SHA1
13c4ce6e28838fc61e91cdd835cc659e97a44be3
-
SHA256
db05a5e6015c3df9603e2e4276ea6420c53af0a99d3fe83f01852813982c6c73
-
SHA512
23de63ee1d0eea5e27f8b23bc4e4fda5c1ae7ad94c2355241fe8ffea99fb67e4e5f26e0e64f0e2e04a4bbae15e8d0e1e9ac0c15e2616c405ec717899eed4df7c
-
SSDEEP
3072:8ZnPmsRpMnAKEH1ZICc574GZRZdNSKycyZFk1aXRjZhd/:KnRRpMnAKy1ZIPPRZRp1qd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac495109c8f07f59e715cd91666215c1_JaffaCakes118
Files
-
ac495109c8f07f59e715cd91666215c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE