Static task
static1
Behavioral task
behavioral1
Sample
f8d9cad667c40c22dcdb8b99ec14dd2f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8d9cad667c40c22dcdb8b99ec14dd2f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8d9cad667c40c22dcdb8b99ec14dd2f_JaffaCakes118
-
Size
67KB
-
MD5
f8d9cad667c40c22dcdb8b99ec14dd2f
-
SHA1
0ba4b3c239dfabcac9b10f6ab5a9ab533aeb44b7
-
SHA256
e49c824fc09cb52a5c46582e127cee80798d127231835c9879b429a0fccb5db8
-
SHA512
6146d2e050f59ffa7a419c0911f4d54cb2e28878c6c9a44662070e3ca951e8f74b4c2bca30787bd40c519d40541815a27ba51004b8d584e350ead272d8062db7
-
SSDEEP
1536:6YP21lj2gQe7L41/ovS3D3Xvzfn+v33BHj/If1wWiMUH:6YPw4gQe7K/4Sz3fD2BHj/01wPH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8d9cad667c40c22dcdb8b99ec14dd2f_JaffaCakes118
Files
-
f8d9cad667c40c22dcdb8b99ec14dd2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE