Static task
static1
Behavioral task
behavioral1
Sample
ed7961d84f405b785b3b0243e3ba696c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed7961d84f405b785b3b0243e3ba696c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed7961d84f405b785b3b0243e3ba696c_JaffaCakes118
-
Size
24KB
-
MD5
ed7961d84f405b785b3b0243e3ba696c
-
SHA1
2539c1e38eb22f95848a6de001e26f5c3dfb2701
-
SHA256
98c25d2aac3b95d8c917e775b2ac31644427e24168fccbde08581878dea9438e
-
SHA512
4f9c592a4a4ed09946c3c8df7d9bb32903304ebeaf2bebf25bb9cb3f3cc3d31663c7f9475cad49276b26a110f75d0465a8ed6ce01d68d8ee2a7a0a41aa76370f
-
SSDEEP
384:Ccg8Rd2vDMK1Z70323qGvQ/xbQ7hXp4WyMOK2rkK5AG9/kt2XFG8FJn2X0qwyQh9:BD2LB0m3qlxE1JJAZ5Aekt8FGtVQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed7961d84f405b785b3b0243e3ba696c_JaffaCakes118
Files
-
ed7961d84f405b785b3b0243e3ba696c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE