Static task
static1
Behavioral task
behavioral1
Sample
d2b0538607b80b7b6b2bc68535d55db9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2b0538607b80b7b6b2bc68535d55db9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2b0538607b80b7b6b2bc68535d55db9_JaffaCakes118
-
Size
322KB
-
MD5
d2b0538607b80b7b6b2bc68535d55db9
-
SHA1
21c9011e4bc1a45e9959763e5080170c43ff8733
-
SHA256
1db7dd9b25605be149cbe856fdc38015d362d5c20ee9b469924306ddaf17d727
-
SHA512
cf0767ca04e8bb93eaf13868e4a8e23d90895295290841b88e2a140bf00be5320414cc90411ca7eb04aa381508660d5a7c48b5f24f43cc2fd6bbba13886e3a66
-
SSDEEP
6144:d3EFqSIN0Gn5uwLv6XmgA5NLt0iVSog9pxF8l0ghVgvwMCdDuK1us:d3EFTWawfj5xt0G4FshKoMmus
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b0538607b80b7b6b2bc68535d55db9_JaffaCakes118
Files
-
d2b0538607b80b7b6b2bc68535d55db9_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ling Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE