Static task
static1
Behavioral task
behavioral1
Sample
fb241f2c3a6d51df68716869be602141_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb241f2c3a6d51df68716869be602141_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb241f2c3a6d51df68716869be602141_JaffaCakes118
-
Size
327KB
-
MD5
fb241f2c3a6d51df68716869be602141
-
SHA1
9cd84cd3c4956c553b7cce09bba5557a674a15d7
-
SHA256
73a94428f0a35bc5ca9efadba26b221c27a4d51f11b24ee8652d8a3ea5b6fa0e
-
SHA512
cdbf211ff1fe4a8fb60de62c9c2520462770e705e4e73fa906d0f0930e133ee3ce712b69ead822783ee284f76223e043db721b7cb05d0ec676ef07bd21c7c85b
-
SSDEEP
6144:h+IgTqfVfIQRP2O7tz4EwzmOzmweCHTlTgcq9tJgi6FkFDJ1ndzGOvT:6mzUFzF3lTeO3CTnd6OvT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb241f2c3a6d51df68716869be602141_JaffaCakes118
Files
-
fb241f2c3a6d51df68716869be602141_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE