Static task
static1
Behavioral task
behavioral1
Sample
400e83322d492bd7fc4450c80c509a91_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
400e83322d492bd7fc4450c80c509a91_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
400e83322d492bd7fc4450c80c509a91_JaffaCakes118
-
Size
1.3MB
-
MD5
400e83322d492bd7fc4450c80c509a91
-
SHA1
911ea70d10d76039c2b02286523534921b3b863c
-
SHA256
c20c22e92579dbc8b28ae3f79aa7a30937d9133b31e979dcb323a2e3dc58f955
-
SHA512
87528cd346116df7063bfa6b48da9c6686652b9310fef521bf08bd386e9862817d6bdba5009d4784f71a1d0abb863a474c3536971706b94547834bc0e5686641
-
SSDEEP
24576:04LvdrJh1+KGAm8n5Es3SNIfkshPH38qKoP8AblZ8UFiItFff3yiNCUtnf1:0gvdrz1PGG73SyRX89IxSUUIT33xQUBt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 400e83322d492bd7fc4450c80c509a91_JaffaCakes118
Files
-
400e83322d492bd7fc4450c80c509a91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE