Static task
static1
Behavioral task
behavioral1
Sample
db1563a0f1621c12fb1f242ebd58b670_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db1563a0f1621c12fb1f242ebd58b670_JaffaCakes118
-
Size
96KB
-
MD5
db1563a0f1621c12fb1f242ebd58b670
-
SHA1
59ba486c57d3c7d17bc571241cf64b7d07221fc3
-
SHA256
72dbaa37ef8f4df130c3153335014757897fed2ebcaaf06d63396bedee0270c8
-
SHA512
c2d2faf1203f309e477820878476be0c9a2ffe03813887410da7ceb05256b968b37bafbd8863ea3ed132a7b23b79e4add2305eacca08c07ccd282cd29e30db52
-
SSDEEP
1536:xhFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8pr5lqiOaH:x3S4jHS8q/3nTzePCwNUh4E95l8aH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1563a0f1621c12fb1f242ebd58b670_JaffaCakes118
Files
-
db1563a0f1621c12fb1f242ebd58b670_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE