Static task
static1
Behavioral task
behavioral1
Sample
c190961667a6a808935b71871f55dcd9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c190961667a6a808935b71871f55dcd9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c190961667a6a808935b71871f55dcd9_JaffaCakes118
-
Size
381KB
-
MD5
c190961667a6a808935b71871f55dcd9
-
SHA1
cf630936b88b0b760ecde2ad5ef6f86234fe5e47
-
SHA256
84fff76c1255fd9d84f4483fef0577eda4bf42162fc9408993f9656d4634a1e2
-
SHA512
8f88dddf66249c0030d82614cdacf4e6c4955ab53f29aa268ff4d4dce1ea54c23f2e01516abb17e1251c7f62f9a7e64f214b0abe47c79d2b44550a29cf0ca9fc
-
SSDEEP
6144:NZSmTWgmoNXUHqSAOHIsH6vhZKofcLkqKSeyoxB4lqbFqHVp:DSm1moNXgHIsyMofcefxB5Fq3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c190961667a6a808935b71871f55dcd9_JaffaCakes118
Files
-
c190961667a6a808935b71871f55dcd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE