Static task
static1
Behavioral task
behavioral1
Sample
d9bd4d23f111bfac5a40c69b4b36130d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d9bd4d23f111bfac5a40c69b4b36130d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9bd4d23f111bfac5a40c69b4b36130d_JaffaCakes118
-
Size
12KB
-
MD5
d9bd4d23f111bfac5a40c69b4b36130d
-
SHA1
92f786a1b8977f58ff4174f767970d2a92cf5ecd
-
SHA256
8342d50e89a281f5b9a2f9e725da347c46f42ef7695ca0a3109e5e1ca0f93ba8
-
SHA512
534252b7936e311e2e4d32662d9d4a0a8d7dff1cedbc1eca67dcee79ae1177edcce7474842d6d64ca4efd4356a8672fbd60ba7958bd8a534a892003b33e64f5f
-
SSDEEP
192:MNX4W3l0vdV+cwpRJmZQUhETcPL6MB6pvXPLR+gKLkjVK5ZbfiL2o4h/G64qE4Yr:Mt2vDbcvWYczZ6tOkjUj2164lKjMWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9bd4d23f111bfac5a40c69b4b36130d_JaffaCakes118
Files
-
d9bd4d23f111bfac5a40c69b4b36130d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE