Static task
static1
Behavioral task
behavioral1
Sample
14ff250cfde84c68655ed7b3b4d14f1c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14ff250cfde84c68655ed7b3b4d14f1c_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
14ff250cfde84c68655ed7b3b4d14f1c_JaffaCakes118
-
Size
393KB
-
MD5
14ff250cfde84c68655ed7b3b4d14f1c
-
SHA1
96642742346ec600de84de6302e02f8832c7fc55
-
SHA256
440fd3aadb0c6646fed7a33675dcea0e820d47773e8922dacc878c0d509413c8
-
SHA512
495be3e119f9c3ba47e734a4a53d60ee1be45717e7a2b73ee47f7f58b5e3380f7e7ff0de4cf2210e5e5025210a4880e7c7b7b71b2c931aa104008172492c5f59
-
SSDEEP
6144:df/8a/OJLRQqzFlW4bh6O2SBimcZGDdBdGbhI5eZW9sdmIBrYqSko:dsZRQiFlW44E0qfGorIBJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ff250cfde84c68655ed7b3b4d14f1c_JaffaCakes118
Files
-
14ff250cfde84c68655ed7b3b4d14f1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 392KB - Virtual size: 397KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE