Static task
static1
Behavioral task
behavioral1
Sample
c7ad330678f3d77884d8391231abcd91_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c7ad330678f3d77884d8391231abcd91_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7ad330678f3d77884d8391231abcd91_JaffaCakes118
-
Size
330KB
-
MD5
c7ad330678f3d77884d8391231abcd91
-
SHA1
5a542bba3be60550710000a36fd2e22ed14c65cd
-
SHA256
2b2d4da8456e1fcea39ef733d1646efcecd447714d13fce983e89b9622325302
-
SHA512
a957353a201169392353c9db9e31414833a2a2cab3c41305c6f13436fe1b637c9dd9142ab67642f4fccb025d5a8392b8e7acc03f2e9ab0f5f01ed606cd19d01f
-
SSDEEP
6144:+GkbMPDXQC3SzBKejkaYvMmaQJh5kNJbIQQfFU7xONL6hJ5/8M0FUsdJxk0Jti75:LkgjQCCBK0ikzoh5kNJkn+x4M6jEOA5J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ad330678f3d77884d8391231abcd91_JaffaCakes118
Files
-
c7ad330678f3d77884d8391231abcd91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE