Static task
static1
Behavioral task
behavioral1
Sample
00e3d69e8d81b7cc2760af4b4ab5e607_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00e3d69e8d81b7cc2760af4b4ab5e607_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00e3d69e8d81b7cc2760af4b4ab5e607_JaffaCakes118
-
Size
40KB
-
MD5
00e3d69e8d81b7cc2760af4b4ab5e607
-
SHA1
c084e5417e1a6372311db6d5ab7a08049435f047
-
SHA256
c07566b47ee80aa60999818f0698f52565bbcdbbaefeb7e16c3ba28f33a50331
-
SHA512
49ea4e84d27336e2651eb9ce51b626e06dcf124a72743656e5cfab1343da9a0c47edeb0a6f8a6e755eeafcc0786c04463e146b015e0d6387177980960253d0fa
-
SSDEEP
768:pdb2QxArpfUjczhMtN4k30aCACOY48VttQMZGswgOEbeLCzaa/m7e6QM:pN2eApMtN4Y0aXCOd8VQtsvO/LMaLNH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00e3d69e8d81b7cc2760af4b4ab5e607_JaffaCakes118
Files
-
00e3d69e8d81b7cc2760af4b4ab5e607_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ