Static task
static1
Behavioral task
behavioral1
Sample
3b28856291e0bb10f8b133b9618b97c4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b28856291e0bb10f8b133b9618b97c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b28856291e0bb10f8b133b9618b97c4_JaffaCakes118
-
Size
10KB
-
MD5
3b28856291e0bb10f8b133b9618b97c4
-
SHA1
cc92d1bd6ffef0ea1dff46d95dc152e22b839582
-
SHA256
9627e86bfd37488c2964ac3d0299ecca90ebc27a60846e9f22fc0ed99182256f
-
SHA512
148dad6a41e578c4d14d70ec949062d975583afdf06b49842e356fe4add741e65ca4cb60888d1150d939d942307b6b87f043c23255c3a7bb4f1a2622a4903a8d
-
SSDEEP
192:znGC0WVb0T5/GOuZnNgdAl4i75NyesXgFCKA3dB+YzT1hy:znGLYbc5/GOuZnNz4i7z0KfIdj1hy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b28856291e0bb10f8b133b9618b97c4_JaffaCakes118
Files
-
3b28856291e0bb10f8b133b9618b97c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE