Static task
static1
Behavioral task
behavioral1
Sample
e06f006d08a0249a3e9031a8531c3e52_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e06f006d08a0249a3e9031a8531c3e52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e06f006d08a0249a3e9031a8531c3e52_JaffaCakes118
-
Size
461KB
-
MD5
e06f006d08a0249a3e9031a8531c3e52
-
SHA1
036d153efdb7475dc7ccf2df3c8ca45aa139ff67
-
SHA256
5c443ccae66405f87f5abd9cf9b2c3731c532a39d0b8445724a7fe74af1a2291
-
SHA512
cf34ff10bd6fa27c410cd3982bfc0fedbf116358a7a0e0d95abf1d686cfb9b045c55cda5d6c4b8b78cec5c054e90364d7cad2705a0bafed4a61cdb50cb543410
-
SSDEEP
12288:rm1pwJc8/zgYQ+edRsdnZFctmMyJNfCu27jrAX5m3:roUzgYSjUymMLLAXc3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06f006d08a0249a3e9031a8531c3e52_JaffaCakes118
Files
-
e06f006d08a0249a3e9031a8531c3e52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 460KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE