Static task
static1
Behavioral task
behavioral1
Sample
bd006c9bf0a0b0b14f51775cd66d4926_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd006c9bf0a0b0b14f51775cd66d4926_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd006c9bf0a0b0b14f51775cd66d4926_JaffaCakes118
-
Size
49KB
-
MD5
bd006c9bf0a0b0b14f51775cd66d4926
-
SHA1
a191321e2cc9cb8d95ffe33e525d0946683a8caa
-
SHA256
73cdef8956ebb9393d81637bc24c36bb2be4928576bd2597eff580ee824cf6f5
-
SHA512
5335e04450b25caa1dc3dc689c69dd625fce44ad4466d00da4385a2dc1f77a1ca9c40aec2f9db544fd6aa88777232c4a626fc46e6b7064a8964cc7f60ff4da44
-
SSDEEP
768:12h2RB29PmfT8/IdtLKWUZ/HpFL8Co+FTrfNMNL9uipGhf1BF9lGC5mFeNHQ:1i2RB2AbTtLJY/HpFL81UrARpIt9rNw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd006c9bf0a0b0b14f51775cd66d4926_JaffaCakes118
Files
-
bd006c9bf0a0b0b14f51775cd66d4926_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE