Static task
static1
Behavioral task
behavioral1
Sample
e25c55fd8620d3c3883133f70d8b0079_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e25c55fd8620d3c3883133f70d8b0079_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e25c55fd8620d3c3883133f70d8b0079_JaffaCakes118
-
Size
6KB
-
MD5
e25c55fd8620d3c3883133f70d8b0079
-
SHA1
f9c6d47c0a23259b2505301fb3d78c1f42552208
-
SHA256
6bbd5879c3526d20ed450e46e6a1e4b114f4481d556400488042733a2b08fa98
-
SHA512
a2669f40b6b3f217551bd9096dd5e7c764676acefa57743e04e4008fadf6159d76a63c81aa46f03694d4f16917f592f9494931bd6054b9f6d00b2f2a09e66c60
-
SSDEEP
96:nPLlI18oBt2iQ2M28IauYqUP2HD+u4GbCuG:ny18ot2T728IpBoBGOuG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25c55fd8620d3c3883133f70d8b0079_JaffaCakes118
Files
-
e25c55fd8620d3c3883133f70d8b0079_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE