Static task
static1
Behavioral task
behavioral1
Sample
31163892ca6cacde9cef901b86ea9457_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
31163892ca6cacde9cef901b86ea9457_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
31163892ca6cacde9cef901b86ea9457_JaffaCakes118
-
Size
393KB
-
MD5
31163892ca6cacde9cef901b86ea9457
-
SHA1
04df09d0f06e53ab145c6dca625ae79a4d7efeb8
-
SHA256
7c930889722f2f29569815738cca85b2906914afd937248db42f06d7fc15052f
-
SHA512
0971053c0cd30763603e09075707140dce45c4f6e9d16ca1158a0ddf2a1840be988017d3fff0b06b70a00e0390fb3e8d291e4ecdbe6d08f358d4304a1ee0d489
-
SSDEEP
6144:2mn8y1ANoftCGbHUBivm38jljJx0lVapdAUG0Mv6cpzEunIcJB4f6ihI2uT:2mn8840tC8uEjJ8Vt0MCcp4xydT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31163892ca6cacde9cef901b86ea9457_JaffaCakes118
Files
-
31163892ca6cacde9cef901b86ea9457_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 392KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE