Static task
static1
Behavioral task
behavioral1
Sample
0e28eed35e87b85f854a00701162e58e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e28eed35e87b85f854a00701162e58e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e28eed35e87b85f854a00701162e58e_JaffaCakes118
-
Size
269KB
-
MD5
0e28eed35e87b85f854a00701162e58e
-
SHA1
e3a19e8c1cb9a6355d4dc6b21a169429ad784067
-
SHA256
e98d2b3125520840bf20a9ec0fde633dd41bae3176152fa89abc215b4d1f3955
-
SHA512
858e6995331d1e2fe232f70e125b4577b57d09bb83646381087b800c450f9932d58c3af5362be88faf0ac5344d8196d00b2fd9df1ff2f6b5be52a6ff23ce5643
-
SSDEEP
1536:ARW0T2tKBJPK6jbkJNLCKefY+JXDoQ9GP3lyK8Fz/IdcMfz8LIv:ARW0TXKmb0LC86DoQ9GPVyK8ZQdcMCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e28eed35e87b85f854a00701162e58e_JaffaCakes118
Files
-
0e28eed35e87b85f854a00701162e58e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE