Static task
static1
Behavioral task
behavioral1
Sample
d23b3d2c02eb53e9d788f55e80eed820_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d23b3d2c02eb53e9d788f55e80eed820_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d23b3d2c02eb53e9d788f55e80eed820_JaffaCakes118
-
Size
304KB
-
MD5
d23b3d2c02eb53e9d788f55e80eed820
-
SHA1
1ec07030835e04c6e004ceb0458f931de28033c6
-
SHA256
26bb49136ecdf555ea383f059f80e35c3c20efcf585362d83910373cbd24280d
-
SHA512
c05c3355e4e92dfb39a85b19ede8b517db105899f38e8497443bf9d1c0283378a8a32a4e9d9bfa19eb70bdca715a5b688e91c4e3ffcecae2b7b43029352cd5cf
-
SSDEEP
6144:+Td0dM5ctb+Jg1s++/j3fzLJYMzkWZeOE/owhpVEkqpbdkDzlcax1zSw:OdUBgbLcWG/oEpmkqhi3l9x1zSw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d23b3d2c02eb53e9d788f55e80eed820_JaffaCakes118
Files
-
d23b3d2c02eb53e9d788f55e80eed820_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 562KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE