Static task
static1
Behavioral task
behavioral1
Sample
4bbf41d80f7ccfc1164a3678a22f42d8_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
4bbf41d80f7ccfc1164a3678a22f42d8_JaffaCakes118
-
Size
96KB
-
MD5
4bbf41d80f7ccfc1164a3678a22f42d8
-
SHA1
57f5850b6da33061ae7ee6dd71ccdddcda6e39aa
-
SHA256
1b045b02c2c40715d0ac2306eaf75cbaeee9e14578d4a6c5d628df2d1c15f3b3
-
SHA512
f96fcc28229dd51ae712a798229b1bd77bf611469cb7bcfc518653219964ee680446419bf4c24c8698057418755f74228008e40490fab8ed6054bcf3b2759881
-
SSDEEP
1536:4IFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prRBJIl0Hq3Yv:4aS4jHS8q/3nTzePCwNUh4E9RQ0K3Yv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bbf41d80f7ccfc1164a3678a22f42d8_JaffaCakes118
Files
-
4bbf41d80f7ccfc1164a3678a22f42d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE