Static task
static1
Behavioral task
behavioral1
Sample
033bafc0e326b9264486aeef3030f996_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
033bafc0e326b9264486aeef3030f996_JaffaCakes118
-
Size
96KB
-
MD5
033bafc0e326b9264486aeef3030f996
-
SHA1
88a299a460c1384f08eebd15e0f2188a6c099891
-
SHA256
57787ed4fa0930b4cc61b782170e1c86d882ceec577bb9165a4a3af573ad91c3
-
SHA512
6150952274a76842279d7995c47e4e9f1897797fb667e55ab8e42d1fb2b4fa18341e0806160ae849fea62f4e2190d817bdd9364efd6b9503fdf2fa210fcb340b
-
SSDEEP
3072:KIS4jHS8q/3nTzePCwNUh4E9FdQuQ4gQs:Kj428q/nTzePCwG73I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 033bafc0e326b9264486aeef3030f996_JaffaCakes118
Files
-
033bafc0e326b9264486aeef3030f996_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE