Static task
static1
Behavioral task
behavioral1
Sample
b3521bbc39496a421948af81c1384e2f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3521bbc39496a421948af81c1384e2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3521bbc39496a421948af81c1384e2f_JaffaCakes118
-
Size
23KB
-
MD5
b3521bbc39496a421948af81c1384e2f
-
SHA1
4c055eee9a13ff539bc8ad720d33a950835b89c5
-
SHA256
76a21bfb8090a5f2e04007c8b95e9d1d8cb04be1fcdbce78952ed602eb156e7e
-
SHA512
c2d7fe4ee7446c9a78f150ac7edabe09c9dcca05a2ee1d0844064c107760f3f72e78fe11c3c9fb76decdb5a3473863709fb6663ff9f9e180e13d2d46f39bc431
-
SSDEEP
384:Rg2vDL8Bt3pXs6R4EtUD1hw095wvWfklNoZNRQaiHJfPH//ltZF3nl/mw1S9Sh/M:+2H8D5ZKEMvwS5du97HJnBNiK/4vS1Kb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3521bbc39496a421948af81c1384e2f_JaffaCakes118
Files
-
b3521bbc39496a421948af81c1384e2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE