Static task
static1
Behavioral task
behavioral1
Sample
09c76e9db353e3d6338235119c463430_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
09c76e9db353e3d6338235119c463430_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09c76e9db353e3d6338235119c463430_JaffaCakes118
-
Size
180KB
-
MD5
09c76e9db353e3d6338235119c463430
-
SHA1
50a436096aa4a959693c8ca93c299de91bdee5f7
-
SHA256
9e4437ff4c5063a8a529835fb70a871e4fd609fb1e4d857bb3929bd1d7543e97
-
SHA512
ab5eceabe7cc99c6069c3af00a88aea293302db86bb8ca44eb610f9eeb244df71ecca844fdcfae32401ce221b830c39724a14f0629be783eb5d4ebb70e93406e
-
SSDEEP
3072:LKWGPMcX8s7Ab2PVwRM56s6+9xRMzEVzvmKw2Mv/eR+8D9HDdle7RIAZAL5m:wMcMs7AbMWA6zS7MzEVjDMe59HDYRzZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09c76e9db353e3d6338235119c463430_JaffaCakes118
Files
-
09c76e9db353e3d6338235119c463430_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp3 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp4 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE