Static task
static1
Behavioral task
behavioral1
Sample
add717001758a9f4f8028f2c52bdb825_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
add717001758a9f4f8028f2c52bdb825_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
add717001758a9f4f8028f2c52bdb825_JaffaCakes118
-
Size
285KB
-
MD5
add717001758a9f4f8028f2c52bdb825
-
SHA1
87562c1bac362150cb72feca3244bf5b0f14ad42
-
SHA256
210956180f54439c9afe3f5f0ab1682874ee853247631914fea197b92de9d596
-
SHA512
2dba0b4693b7976dc88b3e748476fc0a33652b584bfff7763cfece50b741efbc6c5afda53f5133eb31b3260c3c786994687ab2b2ec3bfa44f8b94a3d5e30bde0
-
SSDEEP
6144:DPyLwNmqWUg2nX0HFMY6KIdhzLXqPifJvw8ffbi49r4av1PLay3vys:Dsw8tUg2kHFv69oifRVbiM4av1PGyfys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource add717001758a9f4f8028f2c52bdb825_JaffaCakes118
Files
-
add717001758a9f4f8028f2c52bdb825_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE