Static task
static1
Behavioral task
behavioral1
Sample
b526aca05f2c4d4c4834032df5d3b760_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b526aca05f2c4d4c4834032df5d3b760_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b526aca05f2c4d4c4834032df5d3b760_JaffaCakes118
-
Size
364KB
-
MD5
b526aca05f2c4d4c4834032df5d3b760
-
SHA1
a3988099fb69a142c9b99246a95ff42f8cd011ed
-
SHA256
1d75417fcad7668ed7f7eda709da160b6a1dd6600ccd8801c2e5fc906fc87e38
-
SHA512
3c896a1c493ac780071902655e5aa69e4437a9cef6e643e1853d9e4ff4c0f8eefb8e8a3b4008c284c455f4bf0a1bd5d87292df5f402a1f14a5b7e71b0c7040b2
-
SSDEEP
6144:xTdktj+BW1irafkTH5lSKOFgCY6TCB4SFCpTNbE/zuF2CO:LkR+BW1i+IHatg//4aCpTNbK44
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b526aca05f2c4d4c4834032df5d3b760_JaffaCakes118
Files
-
b526aca05f2c4d4c4834032df5d3b760_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE