Static task
static1
Behavioral task
behavioral1
Sample
c05dda65a254bbf4fa5ba895cdc7afd6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c05dda65a254bbf4fa5ba895cdc7afd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c05dda65a254bbf4fa5ba895cdc7afd6_JaffaCakes118
-
Size
645KB
-
MD5
c05dda65a254bbf4fa5ba895cdc7afd6
-
SHA1
b7f23ce9e2fe99fda8674e149aaadaa84dc816be
-
SHA256
5bf288bccc659d4bf4a686db135220b5fbebf413668882e24ef614e70bdf577c
-
SHA512
b4a520a05514c72ed7fadd1871d96a392840e76de124148e0b2ce05592ec4f0025ee875c77cb43e6a151e844c5e8e2e4fe404aa032531ddcec5eddaf75c14cc0
-
SSDEEP
12288:LdyFbm5bxHDGLKn6NlL6pN/21jI6IaQxDwDkDS7Au4xDbdVFI/NK/9lO:LkFbSxHDGL9bL6pBWiaQaDO7ddVi/sV4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c05dda65a254bbf4fa5ba895cdc7afd6_JaffaCakes118
Files
-
c05dda65a254bbf4fa5ba895cdc7afd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 644KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE