Static task
static1
Behavioral task
behavioral1
Sample
d21e00c5dc99f08cc52c3e6b7b6e7b8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d21e00c5dc99f08cc52c3e6b7b6e7b8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d21e00c5dc99f08cc52c3e6b7b6e7b8d_JaffaCakes118
-
Size
22KB
-
MD5
d21e00c5dc99f08cc52c3e6b7b6e7b8d
-
SHA1
1f6acf85c9f94e7c26887c252e562f9aade7ceb4
-
SHA256
477338a6bd1eeb4575cc6673ae1c4e997166b2033258bdf473ecc072f5a96806
-
SHA512
0c81ff2b6ae0be06c66a94f53fc994fa9b2cab9118e7f4b46ac1aada641db8994310234596f8e3ac17d8f4fa35c2e5fee63facc777508a357117867bb273b914
-
SSDEEP
384:GhoVfR/32vDbCl7QsGoXxmzlGIgqRoCnpm4aQbk6gUSFRiwNGRySFg:OoVJ/2BosG5q9hxbknR9NTSFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d21e00c5dc99f08cc52c3e6b7b6e7b8d_JaffaCakes118
Files
-
d21e00c5dc99f08cc52c3e6b7b6e7b8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE