Static task
static1
Behavioral task
behavioral1
Sample
0fbad6b0e5cb552df68955264702e048_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
0fbad6b0e5cb552df68955264702e048_JaffaCakes118
-
Size
96KB
-
MD5
0fbad6b0e5cb552df68955264702e048
-
SHA1
7c7d9a5db68c76768c05d846a36f82f6f4b5bf71
-
SHA256
62a9ace2dfa4eb00b8f7462198b266d0399c0e7e96be2b06e4285307db456029
-
SHA512
6be3399da43b541286871bb726cc61c115b002e0344068ac5b3d5ca206ed7cfbc46331075d721102c493d1d513fd5188d8bd2dd01d45f381810b2296f69ebbd5
-
SSDEEP
1536:eYFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prq7LjDTyw:eKS4jHS8q/3nTzePCwNUh4E9q7LjHj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fbad6b0e5cb552df68955264702e048_JaffaCakes118
Files
-
0fbad6b0e5cb552df68955264702e048_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE