Static task
static1
Behavioral task
behavioral1
Sample
b51c6dae0a38e4c2111b12f5c9b2a476_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b51c6dae0a38e4c2111b12f5c9b2a476_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b51c6dae0a38e4c2111b12f5c9b2a476_JaffaCakes118
-
Size
38KB
-
MD5
b51c6dae0a38e4c2111b12f5c9b2a476
-
SHA1
47de877f8ccb8da6e8b7937bed1fe0238d293f49
-
SHA256
57a2ce5dc774684bb581ab451afe94af908ea83d9181b1dae9bfef3fdc3346ed
-
SHA512
a606e8fa6486975b15b6690c7b0e4aac79a34a6f775e02fd6cf88b83ca7df6989f52050e657cfe6096135ea6ac87679ca368718f42211439aed19f859f65bfea
-
SSDEEP
768:uev73YAhiToDMoxtfT25Cyv+yWoDOB6DvjTtvd/Z0wAF:9cyQCMoxtL2b+yWUfBvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b51c6dae0a38e4c2111b12f5c9b2a476_JaffaCakes118
Files
-
b51c6dae0a38e4c2111b12f5c9b2a476_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 17KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.anti Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE