Static task
static1
Behavioral task
behavioral1
Sample
3d813133957629c6a28a5877f9c12897_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d813133957629c6a28a5877f9c12897_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d813133957629c6a28a5877f9c12897_JaffaCakes118
-
Size
530KB
-
MD5
3d813133957629c6a28a5877f9c12897
-
SHA1
33059f93c18e3113c3bf93ca752c6fbb7342de39
-
SHA256
34b51b91247adace0b962c080ea4bd3cf1af85a65a326a605b7f23634bcd183d
-
SHA512
a42e3e261ab35e7edb13cb3bd21757caa0a7de1f71bb98122270690ee64717a23cb77d3b663c28479a537c149d5598c00cd584501c797ece84407033c304e372
-
SSDEEP
12288:dhJwCH7PtaiGuq3E4GeFg8tX8ozNeTkU/TslTMoNxnanycj:dhmCH7kzJU4GW3X8oz8TzbstMwxanycj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d813133957629c6a28a5877f9c12897_JaffaCakes118
Files
-
3d813133957629c6a28a5877f9c12897_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 529KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE