Static task
static1
Behavioral task
behavioral1
Sample
5569b70b8ac76697a689ca38934648d3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5569b70b8ac76697a689ca38934648d3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5569b70b8ac76697a689ca38934648d3_JaffaCakes118
-
Size
1.1MB
-
MD5
5569b70b8ac76697a689ca38934648d3
-
SHA1
33fca66671cce9d6b543165b736cfbe518f4dd0a
-
SHA256
fc649a4159c39f629bf401f47f472504a7229ae00a387d79d051a6caaf78cab9
-
SHA512
b997271defefd010b19f6bdc1c51d1e3b89149198eff8887dcbcbd44c9361e49e7dc1c054ed8a29417e22bdf7e7ee528db60f673566edbaf97d1a972279b32da
-
SSDEEP
12288:00JzTB9e+oCUyZtwAvAs4wTCyrPT0yq0VezaOvoJpaz/g/J/vVoS:0eyty/wAvN7lry0VeH8az/g/J/No
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5569b70b8ac76697a689ca38934648d3_JaffaCakes118
Files
-
5569b70b8ac76697a689ca38934648d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE