Static task
static1
Behavioral task
behavioral1
Sample
b517798d22e898f14eca910da5fdd46b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b517798d22e898f14eca910da5fdd46b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b517798d22e898f14eca910da5fdd46b_JaffaCakes118
-
Size
258KB
-
MD5
b517798d22e898f14eca910da5fdd46b
-
SHA1
0d27a473a665337af56019b5de481c29b5ed729d
-
SHA256
318638569745310b1c507c0dc90e0a2045850d467809781ebc72005388fbb407
-
SHA512
4770b1507f52ccded62e15c2f90ce52e172325cab96362d8a420777dd79e96c7600de70cbacbfe24715b0209d8d6523a3d7fdd68c1a6ab2a713717dba09eb254
-
SSDEEP
6144:G851Irb5VcmkoX28wOqZQgQw9O0gH81O6LFN44WdR:p5Crb5Vvkj5OqZQgQwY81DLT4XR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b517798d22e898f14eca910da5fdd46b_JaffaCakes118
Files
-
b517798d22e898f14eca910da5fdd46b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 257KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE