Static task
static1
Behavioral task
behavioral1
Sample
31974befc936d45e064ef6bdcfcd0651_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31974befc936d45e064ef6bdcfcd0651_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31974befc936d45e064ef6bdcfcd0651_JaffaCakes118
-
Size
19KB
-
MD5
31974befc936d45e064ef6bdcfcd0651
-
SHA1
a48046efe0cf0c936b42fe8d6799912964125e00
-
SHA256
605b6604906408adb73d43073a3c1dba6326ea715d6435c618f18b6d6f9b047a
-
SHA512
a3a2e45c7d57e9e80b7360fb89e2e25234c535184f86fd4c13918abc1af1c6d44a601e444702f282718927e7f4a7fec3b4187216973d680a0e63a98a68ea1bce
-
SSDEEP
384:no8eGOuQbEIpeVhhQVjLuyzLW9ofZqjTlOrQZ/WOIjgTVyyhF:nXeZbERThQ9LuyOofZQTlOrgWxjG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31974befc936d45e064ef6bdcfcd0651_JaffaCakes118
Files
-
31974befc936d45e064ef6bdcfcd0651_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE