Static task
static1
Behavioral task
behavioral1
Sample
32da5d085ff0e24bc65c60674affef24_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32da5d085ff0e24bc65c60674affef24_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
32da5d085ff0e24bc65c60674affef24_JaffaCakes118
-
Size
1.1MB
-
MD5
32da5d085ff0e24bc65c60674affef24
-
SHA1
3cc1f1b1a659dff3ad49dd3b5a45df7d1d38b69e
-
SHA256
ef67288f33e946c4618e15e1a99c284016c998b0a5712dbdaade0dc8a8c9bbfa
-
SHA512
7ab5bf9ee691a7678b68adfacabc3547eafdc1b4060ceccd52d90ae74f02e2b153cc64c283b4b6df6393b4b3b633178cf84d2e15153180bdfc76f64d56a1bb7d
-
SSDEEP
24576:NBXnUov9woHLUgbu7xKCtmf3oSG9KMgw2XcYTKv2qlep67/2VuzL7:NzvpLUgeO3oRow2XTTM2MeMuuzH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32da5d085ff0e24bc65c60674affef24_JaffaCakes118
Files
-
32da5d085ff0e24bc65c60674affef24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE