Static task
static1
Behavioral task
behavioral1
Sample
00b3dcdd7d0a8d2af09a288e82370e76_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00b3dcdd7d0a8d2af09a288e82370e76_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00b3dcdd7d0a8d2af09a288e82370e76_JaffaCakes118
-
Size
46KB
-
MD5
00b3dcdd7d0a8d2af09a288e82370e76
-
SHA1
b685f958e2e8b01d70e30acf232de97fe2d2298a
-
SHA256
f5b7777b5d2535e7f4517dc1c3396b27feffc1b20f35b3df0a98e6547829f27a
-
SHA512
dd58f305a10a24b5f8257cd455709456783f112b168c1d7116d76912a6d24cf74775c0b7a56e1551e65d0a2571aeaad162c0b00f0636ec719bc6d3747a924887
-
SSDEEP
768:jmP25dcqgFF89wsz5Ny9qF4OQF2qVLSgM7Ctxu1RU/sdlk7YIp2vdJXIeN0eMSs:jmP25o7sz549Sg22SgMmru1xuMRvAeNU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00b3dcdd7d0a8d2af09a288e82370e76_JaffaCakes118
Files
-
00b3dcdd7d0a8d2af09a288e82370e76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE