Static task
static1
Behavioral task
behavioral1
Sample
152c885af047c0695e22c9ca3a88e3a5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
152c885af047c0695e22c9ca3a88e3a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
152c885af047c0695e22c9ca3a88e3a5_JaffaCakes118
-
Size
2.5MB
-
MD5
152c885af047c0695e22c9ca3a88e3a5
-
SHA1
30c56b0a65f88dd6f7cad11968220061880f15be
-
SHA256
f4e811cffa5794093ff202828174bdf047473390dc80ce034ad285d14de3806b
-
SHA512
ab9addff9654e0e3238db84c09b704c17e2eb18569ec31b8a38bb1ba52effb942daee93d11b2da3663af241ff17950b0385b1d8c72ae5753d927f3d71ccaf679
-
SSDEEP
24576:5wvMPd0XFSaIQxvDnUlkzJ0agv8jmxTpsc5fQ/uEtTY6YzXFpDKhWy:5wzPpQlkllgvmIpdY/pY5zjXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 152c885af047c0695e22c9ca3a88e3a5_JaffaCakes118
Files
-
152c885af047c0695e22c9ca3a88e3a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE