Static task
static1
Behavioral task
behavioral1
Sample
d66df6dae5c9c3fb2c47974ea56c571d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d66df6dae5c9c3fb2c47974ea56c571d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d66df6dae5c9c3fb2c47974ea56c571d_JaffaCakes118
-
Size
274KB
-
MD5
d66df6dae5c9c3fb2c47974ea56c571d
-
SHA1
bb00aa933823017a6ef1adfe7340dfb460b5590e
-
SHA256
6f00f204c989fadee67247f76faf3cfab6517e24061583c94895c08a57097cd1
-
SHA512
1685f9f15c2f2f9f7502d1eea684a0b130fb0b3f8b73b4af47c4c92603c8e4483e49375a0f61e830f9aa676307ddc2768f25be965d4643237035057ddd7544be
-
SSDEEP
6144:12o2GLMyh8wmZY8StmM4E+/el7KqUyGH1KQNL6DuDzkq0DA:nLHh8wUvq+/cj36zNO6z9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d66df6dae5c9c3fb2c47974ea56c571d_JaffaCakes118
Files
-
d66df6dae5c9c3fb2c47974ea56c571d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE