Static task
static1
Behavioral task
behavioral1
Sample
62b8395ef2c0630456af2000d7779f7a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62b8395ef2c0630456af2000d7779f7a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62b8395ef2c0630456af2000d7779f7a_JaffaCakes118
-
Size
10KB
-
MD5
62b8395ef2c0630456af2000d7779f7a
-
SHA1
f4c1f5542583191a1c27a70a83b4f2a24e1c2485
-
SHA256
1220ea85b9673e9b55adbdbb74584445755534457fe65ff790ecb48955033a04
-
SHA512
b791a597988a92bd3c9f2b29b8ef6e21e977994997a98a0babd99baa85b1fd2d26407bbf7fbde3cd8557ff27727c4846051c2d1f80b287f3bc0fae3faa01aa50
-
SSDEEP
192:EMPrW3l0vdV+Qy6fscShk8T973Xyps2TjEjiibs8MA3DRyQx:EMa2vDC6fsc2fF3/jiitt3DRyQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62b8395ef2c0630456af2000d7779f7a_JaffaCakes118
Files
-
62b8395ef2c0630456af2000d7779f7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE