Static task
static1
Behavioral task
behavioral1
Sample
67a75c80ab0ce6d47848a79245cf78be_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
67a75c80ab0ce6d47848a79245cf78be_JaffaCakes118
-
Size
50KB
-
MD5
67a75c80ab0ce6d47848a79245cf78be
-
SHA1
51c83e9b4da41c3b8be1e5c1e2fefd941bcf1367
-
SHA256
2147225e62dcb66be45cf2e06ac42e0f4142938efc3e413da5294bcbd984de61
-
SHA512
4563f0079d6ad1ef308b02486e6c1ed0789017b18cf7805267b9fce0f4ed00e61fc7a7be2646976a58a4751e5312371c1a44ffd239e3d643ca7c2100f39ad3dd
-
SSDEEP
1536:f8eMwZMHXpHZhk38+IcXQ4UUS4gAQ5hKAQH8/9X150pYMAr5:7MwMHXJZMIcQU5Q5WcxUyMAr5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67a75c80ab0ce6d47848a79245cf78be_JaffaCakes118
Files
-
67a75c80ab0ce6d47848a79245cf78be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE