Static task
static1
Behavioral task
behavioral1
Sample
d6f16207a3b9690fd595e94bc0dc0280_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d6f16207a3b9690fd595e94bc0dc0280_JaffaCakes118
-
Size
96KB
-
MD5
d6f16207a3b9690fd595e94bc0dc0280
-
SHA1
1360cd1dfcdfd5387e39dc119b6c5cccf025b1ec
-
SHA256
f6704b8e8531bd40204ec997fb93d5530f728d5654232746f2c4c1ad9a1f8129
-
SHA512
5672cc77318ca0e3e47588d71736072456138db0b4867bc33f9a41bfc3855036e8e6602774f214616690430cc8c7376d1ae5c2a62f21653ffc5c09662e9ee9a0
-
SSDEEP
3072:aOS4jHS8q/3nTzePCwNUh4E98mDSQ7Tr7:ah428q/nTzePCwG78mhX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6f16207a3b9690fd595e94bc0dc0280_JaffaCakes118
Files
-
d6f16207a3b9690fd595e94bc0dc0280_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE