Static task
static1
Behavioral task
behavioral1
Sample
13ed3fe21b86ea07a92307ccbfdcb7f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13ed3fe21b86ea07a92307ccbfdcb7f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13ed3fe21b86ea07a92307ccbfdcb7f0_JaffaCakes118
-
Size
792KB
-
MD5
13ed3fe21b86ea07a92307ccbfdcb7f0
-
SHA1
0dd63953b5b39dd4cfea715f11aa04e6bc287a5d
-
SHA256
b2d78e1bfbed06495c0b11e2da5feda37e6420da0b23e83f89112f7fdb098436
-
SHA512
08725f1c446952842e1687d026e0c11bf321a84f66f0165669022f8e4cfb2900d5e588560da0308cacf193a8711ad4d4383a06092c71c23a743516201633998c
-
SSDEEP
24576:bxyRGP9pVQm2w5NalMhV85X/0ct4nlz0Y7aLo:bxysVj5EMhV00U4lz0Y7oo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13ed3fe21b86ea07a92307ccbfdcb7f0_JaffaCakes118
Files
-
13ed3fe21b86ea07a92307ccbfdcb7f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 712KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE