Static task
static1
Behavioral task
behavioral1
Sample
ce5a5961ee8cfe7968f9bbab562a4c95_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ce5a5961ee8cfe7968f9bbab562a4c95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce5a5961ee8cfe7968f9bbab562a4c95_JaffaCakes118
-
Size
283KB
-
MD5
ce5a5961ee8cfe7968f9bbab562a4c95
-
SHA1
e740bb5a89973b3f7f8da9c61e30cfe8acc7b8da
-
SHA256
e04d05e54f45816f8433386781cbc295affe8b91f827c65e42b19706b26b28c4
-
SHA512
05beb9d58eb9fbfce7ad33e2b2b262170000afd7063f38327c5076e678567f898f02f157a54199e74ca123164c0ac7496c15dec9ba2790e47c1b7d3d5dda0988
-
SSDEEP
6144:3DdkKNx1FzK71P/xtGLCNqF5j2mM4rADpoN+hEBHnL4Ud79:3DOKL1FaP/ng5j2mM4ED8I0HL4w9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce5a5961ee8cfe7968f9bbab562a4c95_JaffaCakes118
Files
-
ce5a5961ee8cfe7968f9bbab562a4c95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE