Static task
static1
Behavioral task
behavioral1
Sample
0fbfa1d48f7e848f67f3c0bd72b88016_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fbfa1d48f7e848f67f3c0bd72b88016_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0fbfa1d48f7e848f67f3c0bd72b88016_JaffaCakes118
-
Size
42KB
-
MD5
0fbfa1d48f7e848f67f3c0bd72b88016
-
SHA1
e188215f549e29a24866f077cb9502bc12719f52
-
SHA256
a4efcf5d5ca1c74d22b83b51728b9533ddc8654331532c7c0af75c6fa8bb1452
-
SHA512
40a6d8b1efde16a25dfd17b446091f583924bd73ec16fde41a828a6801172688fd24523f3f9bf30836ab1911ce2d666203b8736b85c618992e18d1d77dd609ad
-
SSDEEP
768:GQIA+RuGjniQH8/77G5CBXz9KBvSwNmd98GgDwZ447NLEVOIytsliFVHLSR1meCq:GQF+kGjnF8+5CBD9QvHgdmnDRwNwsIyO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fbfa1d48f7e848f67f3c0bd72b88016_JaffaCakes118
Files
-
0fbfa1d48f7e848f67f3c0bd72b88016_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE