Static task
static1
Behavioral task
behavioral1
Sample
0c945efe278e5385aaef9ad3b528f136_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0c945efe278e5385aaef9ad3b528f136_JaffaCakes118
-
Size
218KB
-
MD5
0c945efe278e5385aaef9ad3b528f136
-
SHA1
3cf324044735df87167aca0101584937df7d7ac6
-
SHA256
7afa8d8f3d07cb4d599177aacf62c01b2342db3a7093b1114ca9f8b645348f51
-
SHA512
5cc85f99dfebdcccfe85cb300bea3802f52c1eac5ca4291ee88a0496313910af75af0a76491234268d440a449409c421d8723e07b2f1f8c5ae2a48b3aedc93b2
-
SSDEEP
3072:iNu9h3eiLZT2UTOyU2qTq/yecrqyEIlyny4iio1t1oBM9/AC99kLNh11GJ+UEtEj:lh3eeTXFUnq/yesLEoynn7BMJSXtt34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c945efe278e5385aaef9ad3b528f136_JaffaCakes118
Files
-
0c945efe278e5385aaef9ad3b528f136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE