Static task
static1
Behavioral task
behavioral1
Sample
da5a0cea3a55cea27bf3f56da71843d7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
da5a0cea3a55cea27bf3f56da71843d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da5a0cea3a55cea27bf3f56da71843d7_JaffaCakes118
-
Size
12KB
-
MD5
da5a0cea3a55cea27bf3f56da71843d7
-
SHA1
5fbebf0f1c9c8003e4cfea6e5fb55e35ff8d66e2
-
SHA256
44a055370e16feaf7a685bab7b77c4d62393a6cc53a3e36a3300311b8a4a3839
-
SHA512
403ffa7e320aa5218b7dd8675b4752e8470e86de336eb060a837c97a9c3baebbf2651a510b56f374afb9c6b0cd7ecac9e853fffe9ee6fc4eab42499a26f2695f
-
SSDEEP
192:nKcDTxswWW3l0vdV+T5DRJZvMdVt4AzxUsKRL7EJOJhh9JqsmD2wRRBjP:1DTxpR2vDA1vM3u7EMJ3Xqsq2YT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5a0cea3a55cea27bf3f56da71843d7_JaffaCakes118
Files
-
da5a0cea3a55cea27bf3f56da71843d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE