Static task
static1
Behavioral task
behavioral1
Sample
f9eff6632380d7cec4091e1cf9f29ee9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f9eff6632380d7cec4091e1cf9f29ee9_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f9eff6632380d7cec4091e1cf9f29ee9_JaffaCakes118
-
Size
39KB
-
MD5
f9eff6632380d7cec4091e1cf9f29ee9
-
SHA1
02535d583ffebc3014fe380f03e211853943f453
-
SHA256
ed5bbea6e174fcc732f3ebddd5bde9e514c7b42d1a6ab4d8f24491883c1510a9
-
SHA512
a602d7bd14f8ece6ea1c569d23eb8832845c616fcbf69ee06f08ebbdefbd77bcc8bb427ad72ad6465b74484f981d67e9caed4785895fc481ea83f107b5a88d5e
-
SSDEEP
768:oubg/buGwzEL8vCQwYeweD6Iax6Je4uVvDMYHynEaMRjMxoIz7qJTcjW4:zIbuJzE8vCQwxw6hax6iibnEDbU7qWjN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9eff6632380d7cec4091e1cf9f29ee9_JaffaCakes118
Files
-
f9eff6632380d7cec4091e1cf9f29ee9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE