Static task
static1
Behavioral task
behavioral1
Sample
0de7cf367a7a726afc31b1a424d4f903_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0de7cf367a7a726afc31b1a424d4f903_JaffaCakes118
-
Size
38KB
-
MD5
0de7cf367a7a726afc31b1a424d4f903
-
SHA1
132d1ee8d35c707f3118756c183f83db9ab575ee
-
SHA256
49173f085f401db2f63b53ed63b78d3e014f41c4208e8ea29a5c6433b801f33e
-
SHA512
ffa77dca85e89ff291789202743708c9650fbf6b3c116b2eccca42b93aa335423752b6ea36140c0146244ab8c062434b6df04a4111066f097ff433f963e21b80
-
SSDEEP
768:WS28/zk6YXPatAb6cSh1f6SvoycfqKllU3zcYjRgbyJu:WS2874XCtAuzh1frQyCllazcCqbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de7cf367a7a726afc31b1a424d4f903_JaffaCakes118
Files
-
0de7cf367a7a726afc31b1a424d4f903_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE