Static task
static1
Behavioral task
behavioral1
Sample
948dc582417b700f987bab9ed0fab9d0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
948dc582417b700f987bab9ed0fab9d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
948dc582417b700f987bab9ed0fab9d0_JaffaCakes118
-
Size
24KB
-
MD5
948dc582417b700f987bab9ed0fab9d0
-
SHA1
b400f30d6d40d3e40eedab6d39ec1e29848f1c2e
-
SHA256
45ea23c4f96593ce29274e64aa43ae92c93bc6535ec89555aa420b25336421ad
-
SHA512
00a756c57f4e736b4c58ac731e135d5cc253e1be15207d5ecbf28fbb2ed722dcbfe31fc1f3ad22184a259eadc73f9dd2f11ac6af08fdb62c2cab2a5ae31da7c5
-
SSDEEP
384:1B8cN2vDdOPVcdoAk3UNqNRdfOncQP5tgZdU7FbeQyKmQKxj66vr1XKYunmA9:wY2R7do9ENePfq1Pwg7FKLHHvxXKYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 948dc582417b700f987bab9ed0fab9d0_JaffaCakes118
Files
-
948dc582417b700f987bab9ed0fab9d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE