Static task
static1
Behavioral task
behavioral1
Sample
d61a53a4f95197d3205c967b38be9f91_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d61a53a4f95197d3205c967b38be9f91_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d61a53a4f95197d3205c967b38be9f91_JaffaCakes118
-
Size
539KB
-
MD5
d61a53a4f95197d3205c967b38be9f91
-
SHA1
f647654d697b00d2d90cf3b7511f49666026dd28
-
SHA256
483a2e313818f1acd3bfac19734524cb146710e34dda17e84452d3d3d7b25183
-
SHA512
d50830acce26627939468d6bb8677e43a2dbffe5733af8cb86934ecead60c7a9f2ba9864a590c87468fd47c15723e547cce6c8852d29dc11325899bd86443ccb
-
SSDEEP
12288:Q+YQdyF6BQQvMAocElbvhUb1p/ZpaALRefLNy1hNsH2:T8F6eQvMXc6bvI1pBhmLshu2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d61a53a4f95197d3205c967b38be9f91_JaffaCakes118
Files
-
d61a53a4f95197d3205c967b38be9f91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 538KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE