Static task
static1
Behavioral task
behavioral1
Sample
de3263b4be8b0e73456be31398ff3a44_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
de3263b4be8b0e73456be31398ff3a44_JaffaCakes118
-
Size
221KB
-
MD5
de3263b4be8b0e73456be31398ff3a44
-
SHA1
141c311eea6641a0df352a2893be4f8c282175cd
-
SHA256
962ee37d87ff218373b5d68f5091015b949e965fc60c3bca609ae9f68c52fc22
-
SHA512
f3abd606775d524ddccaabac65408782e787703588c3264313beb4554f2b5a3d46e0e6390f4363dd3f11635a597d634b01b28c0fdf11a025ae88c6836880fcf4
-
SSDEEP
3072:iNu9h3eiLZT2UTOyU2qTq/yecrqyEIlyny4iio1t1oBM9/AC99kLNh11GJ+UEtEU:lh3eeTXFUnq/yesLEoynn7BMJSXtt34Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3263b4be8b0e73456be31398ff3a44_JaffaCakes118
Files
-
de3263b4be8b0e73456be31398ff3a44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE