Static task
static1
Behavioral task
behavioral1
Sample
d3238628f496d1bb768eb95e2849eed8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d3238628f496d1bb768eb95e2849eed8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3238628f496d1bb768eb95e2849eed8_JaffaCakes118
-
Size
271KB
-
MD5
d3238628f496d1bb768eb95e2849eed8
-
SHA1
c3e78603fdb6c9a72f111fcbede17706ed864222
-
SHA256
c414cacfe420d697c087cefdbeb0c119b18ea4dad691bc5473abe237149dccbd
-
SHA512
45c55e6dcd8dc0c203c26b950507462e418f6aef1814f095688368c8694e377dfad5cdaa122ec9094dff085712cf2bed185008634de6748eb99be241c199e605
-
SSDEEP
6144:YuKsgzUyouuQUkbteg5dWqx7R/ecWhA2gsHuPt4atW0kiFv:fKsgz+QUeFr/vfKIhL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3238628f496d1bb768eb95e2849eed8_JaffaCakes118
Files
-
d3238628f496d1bb768eb95e2849eed8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE