Static task
static1
Behavioral task
behavioral1
Sample
0531d8197e7d234e8af12e399a85b833_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0531d8197e7d234e8af12e399a85b833_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0531d8197e7d234e8af12e399a85b833_JaffaCakes118
-
Size
4KB
-
MD5
0531d8197e7d234e8af12e399a85b833
-
SHA1
8cf7d65ad3763a61ebd6d77b62d9e7eab26a6451
-
SHA256
da2577d94cd6bd3f368ab4092447b8610e27fe9a596cf4367d3a71056777afb5
-
SHA512
74c1e421aebb41a5886ce6d357245102b70dfe21e00639ddc52c29b836a5e1d87d9e20b315d957d6757167d39ebc7154ef64c04ed8ff029417b613c5cf631a6a
-
SSDEEP
48:OEPuEyvoBQ5DLeIVl5G36QDBRgzqpwz8Gb2aK/nuuY0AICxmeaNxUkyh:nPV65FPABK+u4GbCuT9ICxoNxUdh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0531d8197e7d234e8af12e399a85b833_JaffaCakes118
Files
-
0531d8197e7d234e8af12e399a85b833_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE