Static task
static1
Behavioral task
behavioral1
Sample
d1855810e29c2e52b0c08bd5f3cd33dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1855810e29c2e52b0c08bd5f3cd33dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1855810e29c2e52b0c08bd5f3cd33dc_JaffaCakes118
-
Size
46KB
-
MD5
d1855810e29c2e52b0c08bd5f3cd33dc
-
SHA1
596971df185bffc913535097d2938ca074617530
-
SHA256
23de100136bd1fa01becc19ee8585bb0b45468eac6d8bb1237812f3808c52c3a
-
SHA512
83447dd71a8f92a73cc664d12e4470061c3efba668b4df248a6e839433e7c09a8a0b13c7f1f08d07e56602b67019bfe320be3880891412e8d544ddfc3a466fe1
-
SSDEEP
768:Y4g2J976kFWN3Meeg50bXLp3Ab81gZBWQuVTGwuTB+lfQtCKl0/THXufsTjHPZgs:YD2Dm1Nt5mbdcZ2OIZ/hvC3B4N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1855810e29c2e52b0c08bd5f3cd33dc_JaffaCakes118
Files
-
d1855810e29c2e52b0c08bd5f3cd33dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE