Static task
static1
Behavioral task
behavioral1
Sample
c290f87733db4b38fdb2bb9c9db79e69_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c290f87733db4b38fdb2bb9c9db79e69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c290f87733db4b38fdb2bb9c9db79e69_JaffaCakes118
-
Size
763KB
-
MD5
c290f87733db4b38fdb2bb9c9db79e69
-
SHA1
099d4a4d5c501ab7eda66b6ddcd206c75d9c65ae
-
SHA256
b17d63a1acce77c59fc9575825aef9c79c7ee21532ded8b0b34d722837006a0d
-
SHA512
6629291b4a010a1f54c2d91208aa4ebf3b2d75d5e6cd9a8b862deafd9a19c08629eae33f4b21c1b9a578ec403bf21a59fd808b4b123837b9e123378a9d4074b7
-
SSDEEP
6144:ScdOhPSO3dm9m4VOwQKts7HiFrQZb++tdsHP4+QfI6U6:d9ON0m4kDL6rQZb+md4w1U6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c290f87733db4b38fdb2bb9c9db79e69_JaffaCakes118
Files
-
c290f87733db4b38fdb2bb9c9db79e69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE