Static task
static1
Behavioral task
behavioral1
Sample
725e323a72882f6cf8455d85149a1160_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
725e323a72882f6cf8455d85149a1160_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
725e323a72882f6cf8455d85149a1160_JaffaCakes118
-
Size
46KB
-
MD5
725e323a72882f6cf8455d85149a1160
-
SHA1
e29c1ece85922d49b234cdeec36e11eff4c2bacc
-
SHA256
60ac0809d5480bdba66d890a0d85ddf126253e9d42e02adee21ac2f532546f3b
-
SHA512
0757877d485fdd9fd3d45aa6e867c99f923021391206986a44b41e26a0979ba0d39debb645ee3eff053a286b958071ba61679d9d503e05e7e81340769277c5cd
-
SSDEEP
768:CEm2Q2CRZyv2vHsoK5Fs899JTuLM6cCG5cYyZGCa9SajTZJGZKLUee44K:9RQ2CRcOvgFfJ2cCcFy0CGJe22zK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 725e323a72882f6cf8455d85149a1160_JaffaCakes118
Files
-
725e323a72882f6cf8455d85149a1160_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE