Static task
static1
Behavioral task
behavioral1
Sample
d596a8f47eafe8e1bf449952cb30de33_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d596a8f47eafe8e1bf449952cb30de33_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d596a8f47eafe8e1bf449952cb30de33_JaffaCakes118
-
Size
91KB
-
MD5
d596a8f47eafe8e1bf449952cb30de33
-
SHA1
5890daff0f0099bc6fcdda5e9d0aa928d2759a7c
-
SHA256
2ebf1f493a032124b56e1284f453435ec699edba461afcb0248733be69c47658
-
SHA512
073011d063e8e2d3f7e885f945a0b8d33d755416d81f85ff8f2b9c83322a43491e7d012a4204a952ba47b8bac39e416e525fcc608f453cf9d4b0640399ae82f5
-
SSDEEP
768:/CPWqpvM5TTHWTETFVoIbjGqOYPpzJjOCH7uR57DmaKinE:/CP5Y6EZVoIbjGqOnCH7uRxo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d596a8f47eafe8e1bf449952cb30de33_JaffaCakes118
Files
-
d596a8f47eafe8e1bf449952cb30de33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE