Static task
static1
Behavioral task
behavioral1
Sample
632f4b277bb981671fbacfb7dd07ae53_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
632f4b277bb981671fbacfb7dd07ae53_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
632f4b277bb981671fbacfb7dd07ae53_JaffaCakes118
-
Size
2.1MB
-
MD5
632f4b277bb981671fbacfb7dd07ae53
-
SHA1
aad6073e9728e710b996b0b38f22249cff21f34f
-
SHA256
7e165a145c20d2a379beeeb0690cd9b5933473ccfea9e6e895e5d15aa4b93d26
-
SHA512
0865bfc8c4943bdbf2fdfac28a0905527be6b28c49f0ed5bee9be1ed1e1db67f9a26927ea89a5bde48ce1881dc453f5d4c49353908e01eaf096abee63cb0da0c
-
SSDEEP
24576:syBP3Uc8itrGK5wU8XQisOnEKZC7E42tpMRGJrNjBsRF1kak9Gw41s3:797Nv5KiaC7RGTjBsj1KQw41
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 632f4b277bb981671fbacfb7dd07ae53_JaffaCakes118
Files
-
632f4b277bb981671fbacfb7dd07ae53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjg Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE