Static task
static1
Behavioral task
behavioral1
Sample
24e6cd78d5921077d8460c14ea75e62c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24e6cd78d5921077d8460c14ea75e62c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24e6cd78d5921077d8460c14ea75e62c_JaffaCakes118
-
Size
91KB
-
MD5
24e6cd78d5921077d8460c14ea75e62c
-
SHA1
2abfed5068fedd798f4c3553de20b6cc06149f8f
-
SHA256
c9486bfcffdcbc86bc822fe5a9cec11f8d63cb97307555849be6ca9b6eef17b0
-
SHA512
3fc70b711d706b49bf3264db8b5392523a6bd12927239408f04896320c2491f4e10f7a12323429948048f15d22b4af5ce876ab293656c91e60d1fe23b2752b33
-
SSDEEP
1536:Mgik9a7u0IrjNdmle+RUKZa6u3g2PhU4uAYGog8ZXhX6I/0Q7rZPRrPx:M/k9aAmrZEg2a4H4ZDlr9Rjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e6cd78d5921077d8460c14ea75e62c_JaffaCakes118
Files
-
24e6cd78d5921077d8460c14ea75e62c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE