Static task
static1
Behavioral task
behavioral1
Sample
3e2bc583dab325b08cb438690854b41d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e2bc583dab325b08cb438690854b41d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e2bc583dab325b08cb438690854b41d_JaffaCakes118
-
Size
58KB
-
MD5
3e2bc583dab325b08cb438690854b41d
-
SHA1
bfb389213759cc9c74a352dcee610be487cc792e
-
SHA256
6cc2899f3dc2440b9ae5acd67190d42bef9ded455aa5078bc002b04064d9e9ff
-
SHA512
e1d03cbb1e9dcb26baca4a3fb86655f8cf527b5bdb66022bb791aa061c6eb1316571a97be9dcfd3d0c0f3788a7695c73f39718753effdc4306ab2d808a6a6a25
-
SSDEEP
1536:+2ksloSjjCbuISAG0h5WvRtMxXUNcHKqe6+7sQS2k:+BsloY2bHpGfZSd0BWf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e2bc583dab325b08cb438690854b41d_JaffaCakes118
Files
-
3e2bc583dab325b08cb438690854b41d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE