Static task
static1
Behavioral task
behavioral1
Sample
dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118
-
Size
632KB
-
MD5
dbaa553574f33e4a8ee6c2fdca2f6076
-
SHA1
eeb44811e264daaa9761cb09b53ae58f300afd64
-
SHA256
4bfc4058c12e43ed7130752046e90514ea396f7ceeb890dfb49b4a695017ad58
-
SHA512
d49af8754b8c8895783879bb0fccd814681b64666f7a3118ae8a5c27e6d49466e7c7b51f58e4e8617dac3d410c261d83b7c3d305240705c367f1f7512f4eba1d
-
SSDEEP
12288:DZrqHlBluDTLMnykCUZBUbHgWZgPWlq7m5QSqIbRIWEHQe18LQk9MDnoRXQ5Ily:D5CQDUykC0BUbWPWP5bXbRiHf180FCgF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118
Files
-
dbaa553574f33e4a8ee6c2fdca2f6076_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 631KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE