Static task
static1
Behavioral task
behavioral1
Sample
0e1f37d34623ba3295f63e43431bfdcd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e1f37d34623ba3295f63e43431bfdcd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e1f37d34623ba3295f63e43431bfdcd_JaffaCakes118
-
Size
26KB
-
MD5
0e1f37d34623ba3295f63e43431bfdcd
-
SHA1
ad61de7d287de3f6b0798e6c144065460266f9cb
-
SHA256
1ec68337628e21e6cc7fdb6782f71e54676b95e1e105acdd801a7f92a9eec581
-
SHA512
48dca8e92c20c83cd7ba8d6dd91e0d4f14fdd947706581051bee683a92a498bd63a62f9327e2fa7b0092cecbd0a3c868089e7715eb40759f9be30d285b31f47b
-
SSDEEP
384:U3lzS6U2vD8r+FmWi9z2d/uefPVmL/OYl+iyE0GH/3+udOs3uiFxzbyOC+:Qz9U2Ar0g9Sd/PVmy3Gv+wOseCi2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e1f37d34623ba3295f63e43431bfdcd_JaffaCakes118
Files
-
0e1f37d34623ba3295f63e43431bfdcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE