Static task
static1
Behavioral task
behavioral1
Sample
dec686c9c9e155adff2cf1a8e45b7dd8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dec686c9c9e155adff2cf1a8e45b7dd8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dec686c9c9e155adff2cf1a8e45b7dd8_JaffaCakes118
-
Size
1.0MB
-
MD5
dec686c9c9e155adff2cf1a8e45b7dd8
-
SHA1
f8f285d5384288036254a426b5e8cd90a5182d3f
-
SHA256
a5ba07f4899b2ba23d1f74144158ed98ab217cae2841f70991b0b23a6db49787
-
SHA512
95094aad21b737ea406ddaec5bbe01a6be0bb69caecd06bb85d84c57a136d7b4ef17c047f8541667f0ef75e02e15caa7b3128cc118f49f37114e5b69f40101d0
-
SSDEEP
24576:GknrVVoxyLepXSsmE6XbdgvlPP7F6BszN3WI8x7J1WfO4nucIKWPy:Rnr7oxyCFSX/Lavv66zNn8x77W7Uo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dec686c9c9e155adff2cf1a8e45b7dd8_JaffaCakes118
Files
-
dec686c9c9e155adff2cf1a8e45b7dd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 502KB - Virtual size: 502KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE