Static task
static1
Behavioral task
behavioral1
Sample
4509b012760e61c9a21923e077f16a18_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4509b012760e61c9a21923e077f16a18_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4509b012760e61c9a21923e077f16a18_JaffaCakes118
-
Size
737KB
-
MD5
4509b012760e61c9a21923e077f16a18
-
SHA1
b8ac99fe8da0c5e0a182d206fd411891566bec1c
-
SHA256
62f493b3c793b25d1c4b358b00e724435bc87c2807d7e9e6e29131a0939d7633
-
SHA512
9c59e3f988f36c963342b50a53bbd55b9aec1c463750d393c1d8df3571aeb9af31f64f4e349ff62a753a3db36d63fd358d727efb67ea75693270d123e8ed9a91
-
SSDEEP
12288:VxroOmDuFBrT046ffHjG/gCJh+Nu0oEHfH+vcpntY4wvpReqaDkwVTKuqcziev7U:Vx8DurvGqFqNxo+PDntRCbxwVmALjUfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4509b012760e61c9a21923e077f16a18_JaffaCakes118
Files
-
4509b012760e61c9a21923e077f16a18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 736KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE