Static task
static1
Behavioral task
behavioral1
Sample
714479c64204d2ac937596bcbfb511d5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
714479c64204d2ac937596bcbfb511d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
714479c64204d2ac937596bcbfb511d5_JaffaCakes118
-
Size
45KB
-
MD5
714479c64204d2ac937596bcbfb511d5
-
SHA1
cb9eeb00b983cbc63f8292e59707f8b68674d699
-
SHA256
972b7cc39928286fc49f01c073befbdd7cc24c9979ff1e6bef46898e87ff6b6a
-
SHA512
f56357a5c72d1280bce16f8d94c7ee749a1f3e8a3d1765d8d225bcb57a1510fb6d04fbc0f94fc968ee8eff101fa294045e75213ea945f10fc0cfdf2c8629032b
-
SSDEEP
768:LPvz2IAoV3MRuburLOwUMkX9lshcXj/ckjnVFhrTXwBPo+4d4M6ZsRgNN1ppdq:LPvz2CZWLOJMkX9lJXtTrhfQP7NVZsRZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 714479c64204d2ac937596bcbfb511d5_JaffaCakes118
Files
-
714479c64204d2ac937596bcbfb511d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE