Static task
static1
Behavioral task
behavioral1
Sample
b88d3b9c5a99f6aa8b521f4356d628a2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b88d3b9c5a99f6aa8b521f4356d628a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b88d3b9c5a99f6aa8b521f4356d628a2_JaffaCakes118
-
Size
723KB
-
MD5
b88d3b9c5a99f6aa8b521f4356d628a2
-
SHA1
e600bb6e04130e721ef1e090f2f2d1872ce433b4
-
SHA256
0e49488108494a8e65f974e5bae14e19ca65b73d72ce4f8b8847dcdd9103f942
-
SHA512
b4a8addaf1e01def8b70d2b7a78964c014f2829b5842fcc76fc0eb9b540550a3c34797b61feed3ac60107120e519c9dd33b9d0921b4385908918caa6c1056cd8
-
SSDEEP
12288:kAZd6NV1mxS2SuDr+GKmScllYI2G/lLnDpD5MiqqCep1sbZJ1arbxgtEHC:7xZT+GNSZk3D5Wi1QZwxji
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b88d3b9c5a99f6aa8b521f4356d628a2_JaffaCakes118
Files
-
b88d3b9c5a99f6aa8b521f4356d628a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 11.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 691KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE