Static task
static1
Behavioral task
behavioral1
Sample
0dd7ea62ab1d28feef80fb1df06b147b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0dd7ea62ab1d28feef80fb1df06b147b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0dd7ea62ab1d28feef80fb1df06b147b_JaffaCakes118
-
Size
5KB
-
MD5
0dd7ea62ab1d28feef80fb1df06b147b
-
SHA1
8b3521f014b945ccca3ad956cabc71cbcff4cdd6
-
SHA256
46b7a45f6d8c406ec51863ec2bb3168c29e58affb15811a55e40523ba4dc1566
-
SHA512
7bc08549993b3154e5a417d97c72635422bfa778e2ce29c384d943663888253a9855657a66f6d102841b06e5e63d3c05ffa2baa0a288f2f414317520ca115b69
-
SSDEEP
96:nPkT3tEf8h/qyP8/kTpGKG3ljAvWC61WnV+ng3qbMXBaYS8r1HoL/Dzvm6:n8K8h/qi8stW3l0vdV+ng3cMXBayi7Dr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd7ea62ab1d28feef80fb1df06b147b_JaffaCakes118
Files
-
0dd7ea62ab1d28feef80fb1df06b147b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 139KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE