Static task
static1
Behavioral task
behavioral1
Sample
11b51127c02b6df78b3896fe5080288d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11b51127c02b6df78b3896fe5080288d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11b51127c02b6df78b3896fe5080288d_JaffaCakes118
-
Size
276KB
-
MD5
11b51127c02b6df78b3896fe5080288d
-
SHA1
20d9538387c6b96a6fe02675c8fa07decbdc4acb
-
SHA256
9bfdfa3b85316ccb22ca0fab3fb3cf4ae066f1b55f6a2dd8f39431f15bccc764
-
SHA512
eb35fd840cfab636532e5ba5805c06ad0b19e0248f8663605d3823afaf593953d7a1cf30ecc4ede3f1c7712a28211c141fa83d61436c3944fff1e1fef58bca93
-
SSDEEP
6144:vA9DSZq3EVZbqp1dUZihfW0yzEcRjtnRXTBa0tjVZPvXVu:o9w8wb2zUk5JOvj/XTBas5RXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b51127c02b6df78b3896fe5080288d_JaffaCakes118
Files
-
11b51127c02b6df78b3896fe5080288d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 275KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE