Static task
static1
Behavioral task
behavioral1
Sample
d2b39c4bc961654efe660b374b116ed4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d2b39c4bc961654efe660b374b116ed4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2b39c4bc961654efe660b374b116ed4_JaffaCakes118
-
Size
39KB
-
MD5
d2b39c4bc961654efe660b374b116ed4
-
SHA1
9a9238c96c4e2512bee5c04b3a2e772d9bfe93c2
-
SHA256
e61ba05cf0e70f96a459d20be1726edd5d9585cab26d4c9314307ca9ffed17ca
-
SHA512
18c2ba3e20ee2b998a9429fc7407097c2f495e2f33d539f95bf4c64a9165dcd7e57a6b9acf66a5f55427057cf6f59c8adb14215f5f6c146c01bfc417a677c446
-
SSDEEP
768:STt6dVYSiVJw6a4MXPHG1pVL/h5eZWKo84FqitbJOi:Sh6gBq4Me1pVL/L7lhQi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b39c4bc961654efe660b374b116ed4_JaffaCakes118
Files
-
d2b39c4bc961654efe660b374b116ed4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE