Static task
static1
Behavioral task
behavioral1
Sample
b392c642d746adcc023637873460dbab_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b392c642d746adcc023637873460dbab_JaffaCakes118
-
Size
620KB
-
MD5
b392c642d746adcc023637873460dbab
-
SHA1
ee6ef438d2b2a0cfef656904f9505a4df0313bd0
-
SHA256
8f6d2206f698379c693facb7b7a0a9f5cea9d086d41814eaeae07417901b854e
-
SHA512
bc1bcd9882744f2c31bc8ae046f2f029fd9bc6754b20ee69413993cc0ca951f14ec1027aedb8ddc8140b7060f9bf88f9b7ccde20dbc5ac4a0baaaed6b40109a7
-
SSDEEP
12288:QQCWPktENSY4zokjNnEoLhxjaCMFzAziU7cRI2TT1JtieLs1cJ:QQpctzRzTNnhW1e+va+pJk2s+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b392c642d746adcc023637873460dbab_JaffaCakes118
Files
-
b392c642d746adcc023637873460dbab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 619KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE