Static task
static1
Behavioral task
behavioral1
Sample
1581c904b8e2925b3dcbc9d352e81ba5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1581c904b8e2925b3dcbc9d352e81ba5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1581c904b8e2925b3dcbc9d352e81ba5_JaffaCakes118
-
Size
34KB
-
MD5
1581c904b8e2925b3dcbc9d352e81ba5
-
SHA1
6b90dcac3948c6d120b9918159d06a076c2394ab
-
SHA256
e5c7ff8f07d214957a3a1eb1e3975e9a8e9254fd814a712d233fd92e220e13cc
-
SHA512
b731ad431e2e58b34a3cd9405dbb13e4a4bcd611a242d24b5fa4bbd90c27e97f88ffb4da0c3766eda4ad8b3f0c310f3da3510f9edd0ecbe338c996dfb999dd76
-
SSDEEP
768:XwkSXKzcVxNqJ/ny3glyYIPhCF4vo/4A8GVEVez9n:g/K0cJ/nVZ8hWyRA8wFt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1581c904b8e2925b3dcbc9d352e81ba5_JaffaCakes118
Files
-
1581c904b8e2925b3dcbc9d352e81ba5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE