Static task
static1
Behavioral task
behavioral1
Sample
442ab4d1954cff205cfbfdcbe302db96_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
442ab4d1954cff205cfbfdcbe302db96_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
442ab4d1954cff205cfbfdcbe302db96_JaffaCakes118
-
Size
33KB
-
MD5
442ab4d1954cff205cfbfdcbe302db96
-
SHA1
6ba9658ca44f2320b9f40212cc08f7fb0e83ccde
-
SHA256
0002818a4fef7aea3bcf4fc6aae916ae8833b6b83434895cd4dce82caa64a654
-
SHA512
f27f0dfd271eceffb8d0aed255d48679a6b3d3a621f6d430fa0b451ddd617a103cac2469a246a9c2edb5a97528de89c0a4cf4d6979c4676cb3476d9d788ddf01
-
SSDEEP
768:ByEsrJv2f6l+YIY28rWsWMW6g9j+hDHx+g4zrvhT+FWn85RtiLhWG:sEsrl2f6qtWfkl9jxgirvhSFWmz3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442ab4d1954cff205cfbfdcbe302db96_JaffaCakes118
Files
-
442ab4d1954cff205cfbfdcbe302db96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE