Static task
static1
Behavioral task
behavioral1
Sample
0b024a8406b5dd0bcdd4c9623436f9c9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0b024a8406b5dd0bcdd4c9623436f9c9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b024a8406b5dd0bcdd4c9623436f9c9_JaffaCakes118
-
Size
23KB
-
MD5
0b024a8406b5dd0bcdd4c9623436f9c9
-
SHA1
230138822986d746437f7fe7b28d3b4465b5fa13
-
SHA256
07ae19c15c1522d5e7a1ef964893e2cc7a157ba72e15868d2ae0ba4702fe7949
-
SHA512
91d9bd2f6a7c2a4acf403fb5bba3af552fcddf8415423b6fa0ca8756777fdd506218ddabacd18c946a583f8f8c71e7a6f5aeacb50c881542c85fc05a7d9f0d44
-
SSDEEP
384:PEnawYYzT7GOu6rmlUbl/ODN4KX29gl2EFyUFIXcGakiLT3dujDHPNHUjGqNErr6:soYP7LbkDWKm9glBFyAWcGakU3EjhHw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b024a8406b5dd0bcdd4c9623436f9c9_JaffaCakes118
Files
-
0b024a8406b5dd0bcdd4c9623436f9c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE