Static task
static1
Behavioral task
behavioral1
Sample
0f19d97e2959bf5a4b8d649b3e632400_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0f19d97e2959bf5a4b8d649b3e632400_JaffaCakes118
-
Size
96KB
-
MD5
0f19d97e2959bf5a4b8d649b3e632400
-
SHA1
b279203b32e209aee15633fd8bc5e9b1db3ee182
-
SHA256
165fa9f7e043f744549831cd58108c820af3a362acbae42f0818b3158a80aed9
-
SHA512
7b17cc7f3c52c19b16769626b5694754593423832a52fb644ebeeded58ba4630c1e5a2f91181ca6a687d7267d5f5e836a3679be0a00a7a89baa01900459a6351
-
SSDEEP
1536:iIFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prCsEotChLDW:iaS4jHS8q/3nTzePCwNUh4E9CsEoOLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f19d97e2959bf5a4b8d649b3e632400_JaffaCakes118
Files
-
0f19d97e2959bf5a4b8d649b3e632400_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE