Static task
static1
Behavioral task
behavioral1
Sample
cf53eecb74c75e130f882c3af83e9592_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf53eecb74c75e130f882c3af83e9592_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf53eecb74c75e130f882c3af83e9592_JaffaCakes118
-
Size
265KB
-
MD5
cf53eecb74c75e130f882c3af83e9592
-
SHA1
5b8415f90fcd022d743564a72da676767b8f8df6
-
SHA256
7bb314420a59769aa17191cab153d6d86ed15249caaa89ddb9ea15259c92a906
-
SHA512
4df3b7dfe09c44dbd963646566d4383ed3c9cd7a48c72ae112608aa57bfd5831df63267456cfc065a55b3e6a89d86010d8a77620544938e05e11730b8429957d
-
SSDEEP
6144:Xoy0Y5nlmmwsv4Xdy/T9r/bA/h7p+rzn2rEwM1BaJeQnsq0nP2:YRY3mmwsvQ8rS9p+v2hMmsef+2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf53eecb74c75e130f882c3af83e9592_JaffaCakes118
Files
-
cf53eecb74c75e130f882c3af83e9592_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE