Static task
static1
Behavioral task
behavioral1
Sample
0d0766d8abaf9f76c3a94a0b7528e3fe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d0766d8abaf9f76c3a94a0b7528e3fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d0766d8abaf9f76c3a94a0b7528e3fe_JaffaCakes118
-
Size
290KB
-
MD5
0d0766d8abaf9f76c3a94a0b7528e3fe
-
SHA1
eb9e22de997524acf15e1ec9f3b5636521a802fd
-
SHA256
522d0de94f8b1e9566ba7126971dd5d5d93070ce50bd6352e7b06bd50d4d59da
-
SHA512
d941b438ec7a3ebd653604416bf0d20c1f93640bcd5dfc142facfc107108e346b541a806174355561aff453399eb09e6fc3ae6000bca19208b4dc94e39ac2569
-
SSDEEP
6144:gjMdD+x6zk8VneIL1PwEplJ0pcsteWCB/ywvMA5OgwrrI5:xdDS6A4egF7+nMWCVE06rw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d0766d8abaf9f76c3a94a0b7528e3fe_JaffaCakes118
Files
-
0d0766d8abaf9f76c3a94a0b7528e3fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE