Static task
static1
Behavioral task
behavioral1
Sample
c2625e79d95cc4ac522a1dca5b7417e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c2625e79d95cc4ac522a1dca5b7417e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2625e79d95cc4ac522a1dca5b7417e6_JaffaCakes118
-
Size
24KB
-
MD5
c2625e79d95cc4ac522a1dca5b7417e6
-
SHA1
d4bc1f2478044e694a54d618a818e764bf7c1c59
-
SHA256
23e58df029a84b008f2f3dc1ad3680c31f7bdb78d327e7ba45f165720a8d24a9
-
SHA512
51bb977922d7c2940776016754c7065e6e44641499c21587e5c693e1612b09d828e8bb73c0dc8879c2ed24bf8a8c92e65a5bae6af66c0612fff60a3391daae81
-
SSDEEP
384:OT/xQGOuvlqQ9kO5qJ1tWxqmFJCLM7MD5lxpGkamLTAuuo+LP8U9:oQKlqQSuqPsd/7m5likF4tp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2625e79d95cc4ac522a1dca5b7417e6_JaffaCakes118
Files
-
c2625e79d95cc4ac522a1dca5b7417e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE