Static task
static1
Behavioral task
behavioral1
Sample
35e5792123c9ad01d6850f971a95a198_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35e5792123c9ad01d6850f971a95a198_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35e5792123c9ad01d6850f971a95a198_JaffaCakes118
-
Size
11KB
-
MD5
35e5792123c9ad01d6850f971a95a198
-
SHA1
3ec226d00a69fabbb136c1a03d85d11c27f46cd9
-
SHA256
8e6a917d6de397d721eabf90ce5e53feb32f7624c9e283f0687eeb551d2be2ff
-
SHA512
e9b8cb6ae822cc319baaba4a9b17e05beb2805283585bd0f0f5ac2e964305ebac7d85ef4628aeede7b6ec19ecc4f2c15849ada44348997ac538a09c458e22b4c
-
SSDEEP
192:SPZNbWb2+il4D1VW3l0vdV+4Mb6AzAtuAw3BV6pPco5F8pSDlxZG6cjVP+P+MH3E:SRxWbal72vDtmhgiBkpP55SpWJ0YPf3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e5792123c9ad01d6850f971a95a198_JaffaCakes118
Files
-
35e5792123c9ad01d6850f971a95a198_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE