Static task
static1
Behavioral task
behavioral1
Sample
1792c3b0173abdf69df745025f0ba76a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1792c3b0173abdf69df745025f0ba76a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1792c3b0173abdf69df745025f0ba76a_JaffaCakes118
-
Size
110KB
-
MD5
1792c3b0173abdf69df745025f0ba76a
-
SHA1
4c873fa852e9f300af4e7522ea097d731c14d82d
-
SHA256
efdb789e0d5fa4ef17bae0f5cf824386b6eced5df63345bf41f9f4d850fe696c
-
SHA512
89906b8882b612a7b6e75baf96de8f406fed0d7fdf32b935dc45f895072576c4465e7456fce18c09e486e8a6359796c5927fcfbd397ef4bf484b72b4d4555fb1
-
SSDEEP
1536:O2a4+qAAVVSbe7A3iK2jY9CKL+YxfWm7t7Vv23+Yuld+7yqm/BZNqx:OJ8Si7AF2UQM+SO4tBC+YuYyqm/BZE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1792c3b0173abdf69df745025f0ba76a_JaffaCakes118
Files
-
1792c3b0173abdf69df745025f0ba76a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE