Static task
static1
Behavioral task
behavioral1
Sample
2449c8b28db351106b3099f1d60f9a43_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
2449c8b28db351106b3099f1d60f9a43_JaffaCakes118
-
Size
96KB
-
MD5
2449c8b28db351106b3099f1d60f9a43
-
SHA1
9dd7c3abc92d850793c308805afe03049ada42bc
-
SHA256
7bf243d5f2ca3ec933872e1b086ab0a2ca08336fa11d749d33b28c88d91ebbbc
-
SHA512
1820b0605b78e8f8bb60e3ef327752fc67129c825dcc80a2bf07bccef9931609c455ca1cf7b95628c0abdbdd84ebb1e119b8da64c1bd7759f677026137e72472
-
SSDEEP
1536:xEFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8pr4Q6U5s9J6jX:x2S4jHS8q/3nTzePCwNUh4E94866jX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2449c8b28db351106b3099f1d60f9a43_JaffaCakes118
Files
-
2449c8b28db351106b3099f1d60f9a43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE