Static task
static1
Behavioral task
behavioral1
Sample
31c4b769d351d56e9d79e3a488ee8e52_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31c4b769d351d56e9d79e3a488ee8e52_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31c4b769d351d56e9d79e3a488ee8e52_JaffaCakes118
-
Size
1.1MB
-
MD5
31c4b769d351d56e9d79e3a488ee8e52
-
SHA1
2a952ae9f7ec189b985aed82a16a3b0a7d6cb5ed
-
SHA256
80d3d5186d4e0177292d5622d6db85f23dc17539f659b8655c316f2cdd34ec29
-
SHA512
0ff3e345199a3f694c352ec43425c6f21b1d5ddc9b1ab497d51c8642cbb0a51c3ef6e72dbd9d09871f1474b77e48196509a33fe28c79739abf13c59b7f2e2b42
-
SSDEEP
24576:5zd7Xx55eftazWwPOStU4gf2EW5A2DJr/kS4vGIk6v3HbWv:5n55ewznOh43Dp/wPHbWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c4b769d351d56e9d79e3a488ee8e52_JaffaCakes118
Files
-
31c4b769d351d56e9d79e3a488ee8e52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 274KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE