Static task
static1
Behavioral task
behavioral1
Sample
de116a9d450472ec8adf05cbbdbe0d79_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de116a9d450472ec8adf05cbbdbe0d79_JaffaCakes118
-
Size
96KB
-
MD5
de116a9d450472ec8adf05cbbdbe0d79
-
SHA1
0e7debd9b9a910b967fd343e146d81f58f2d832b
-
SHA256
543158f385b941bed30eead82c6c7764fec7b0b605dc27f5d395ec40974aec76
-
SHA512
8f0d05fe9dae83a8dac90aa0c8fa00da9e4cab295ef65d803c99eb6d89ad954356f417e79d3a2d39be34aefc740245bb7d2cbeaa7c06dc2a9a340c4a026b1df7
-
SSDEEP
1536:xhFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8pr5lqiOaM:x3S4jHS8q/3nTzePCwNUh4E95l8aM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de116a9d450472ec8adf05cbbdbe0d79_JaffaCakes118
Files
-
de116a9d450472ec8adf05cbbdbe0d79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE