Static task
static1
Behavioral task
behavioral1
Sample
072c16874e0bb69e9c2cd587670ac35d_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
072c16874e0bb69e9c2cd587670ac35d_JaffaCakes118
-
Size
96KB
-
MD5
072c16874e0bb69e9c2cd587670ac35d
-
SHA1
6a6da335080c675e9f342e0c2b0a6fefe855b221
-
SHA256
ac9b72e54bee862a12e7b03ba1458a0fdd9ba3a575c7180a2e9fac4be265578c
-
SHA512
9c55d184014cf8e3ae50e4d1ab32cdd06f26069b8707393ca087f1d382eb8d69afedb30ce2fccfdaa4fd4c71b3cecb59ca92137ae09ec74fc79d6de70f55619c
-
SSDEEP
1536:7cFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prHhjVQN9yIefB:7OS4jHS8q/3nTzePCwNUh4E9BKDynB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072c16874e0bb69e9c2cd587670ac35d_JaffaCakes118
Files
-
072c16874e0bb69e9c2cd587670ac35d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE