Static task
static1
Behavioral task
behavioral1
Sample
c989d457036a8cd110280729bd54f350_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c989d457036a8cd110280729bd54f350_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c989d457036a8cd110280729bd54f350_JaffaCakes118
-
Size
20KB
-
MD5
c989d457036a8cd110280729bd54f350
-
SHA1
6eb1131800492314f7df2a8ff647bc1e7410b643
-
SHA256
199592c3e2b5eed8686e6cfd1fba913eab3da288e24e95d6896a78cc18b961d4
-
SHA512
18639c7d7de4dba659c3d062d8425ae5dcc94fc28c7d507ea48699d42f7f222fa6b70cbf3e06983e527e5903c5890703b86091566bf7249b8778719062010454
-
SSDEEP
384:o9z2vDyxbfTdhmccBADMTpugFvaxxKbtu/wf8X/PMaV1OdobKj3:o92W9hmccBQuixKbQdPUUs3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c989d457036a8cd110280729bd54f350_JaffaCakes118
Files
-
c989d457036a8cd110280729bd54f350_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE