Static task
static1
Behavioral task
behavioral1
Sample
d9b22c8074a1d6e7b3d29d578afea29f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d9b22c8074a1d6e7b3d29d578afea29f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9b22c8074a1d6e7b3d29d578afea29f_JaffaCakes118
-
Size
40KB
-
MD5
d9b22c8074a1d6e7b3d29d578afea29f
-
SHA1
30257faa2b63d551e755cfb3f916ff7b389c1b0a
-
SHA256
206651e8e33de6e5c4f2ec0f0a6c31210fea9749541c2235e2437a2e27d89543
-
SHA512
6f37b3f4444f4028d1f0b34bfcdf1c0f0a40e12f321edc78183699e01ec15ab88e2c8849564b92a4a75017787a6d8b1c0e9fe0684bcb48cc771b2608b1638210
-
SSDEEP
768:/c2LfczxY4hcHkgyisPxadOnrTzHBi/R8jDDR9nwMq6ZQ+:/c2L0NYdEgyRGOnrTzOR8DRpwMnZp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9b22c8074a1d6e7b3d29d578afea29f_JaffaCakes118
Files
-
d9b22c8074a1d6e7b3d29d578afea29f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE