Static task
static1
Behavioral task
behavioral1
Sample
8b632b4e522eed6bc0a20ea077bc8806_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b632b4e522eed6bc0a20ea077bc8806_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b632b4e522eed6bc0a20ea077bc8806_JaffaCakes118
-
Size
15KB
-
MD5
8b632b4e522eed6bc0a20ea077bc8806
-
SHA1
426a94681e67d9aebf4fb791d6e8920361b2c7ce
-
SHA256
704f051a31ac158ba82a2fcf5ec2240f96c43201a200fa6b7618d374b8c0376d
-
SHA512
9c5c382d85ad7c3ab48ac770c35fe81d515171012a10bef4af8b81cc5ec12ac761f97efef2e9373fedbe1cc18fe4c229644e57c55bf37388c4a6610fcabd942f
-
SSDEEP
192:/TzcdW3l0vdV+Xiu3XU3SsELlQ3FrNmGJ8v6507iBo9HtE3zKla2ahS5RBE8:/vcc2vDmB3XNWVq0oJjE3G82acHO8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b632b4e522eed6bc0a20ea077bc8806_JaffaCakes118
Files
-
8b632b4e522eed6bc0a20ea077bc8806_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE