Static task
static1
Behavioral task
behavioral1
Sample
008157257d2a192571a2d2bf5688c6b0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
008157257d2a192571a2d2bf5688c6b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
008157257d2a192571a2d2bf5688c6b0_JaffaCakes118
-
Size
805KB
-
MD5
008157257d2a192571a2d2bf5688c6b0
-
SHA1
c29d71f9d8beb53b39dadea9b6029339089ae7a4
-
SHA256
bd4c32a3005420475d93a5b4e317b5c08be02ef5e878281bf7aa431f548ebd7e
-
SHA512
c9be4a576feddccc9b630495b35fe3b3fb530e3eb828c200749e8f4066dac0bb70c0e6a2e02992ab4b9332a6a57686e604bbd0fac786af905ea3e0a44b124855
-
SSDEEP
24576:DuVmFFosuLtxr0KxS4/SsG0o++yfPHmltZV3VqpQ:pexZS4/SsGReGl7+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008157257d2a192571a2d2bf5688c6b0_JaffaCakes118
Files
-
008157257d2a192571a2d2bf5688c6b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE