Static task
static1
Behavioral task
behavioral1
Sample
442c1266cf3fbf5ba52b334ad5b509cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
442c1266cf3fbf5ba52b334ad5b509cc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
442c1266cf3fbf5ba52b334ad5b509cc_JaffaCakes118
-
Size
53KB
-
MD5
442c1266cf3fbf5ba52b334ad5b509cc
-
SHA1
a5babd64ba05e26a98f0d756d6805235dc5465f2
-
SHA256
05a890aae1c5acbf8b603e1f063ff5e723187bba96c80a9899fb8de3d9a6324c
-
SHA512
7a4a5e0ba6a9a642ae8523b880802f8848d2fdb63098c8885cebc5355a1308500a767214a04e136c664305dff94022c7623ac5b82940f3d64e56f456f0285571
-
SSDEEP
1536:TaXOSYrn1KzLj1dx5q9HNOxX21IFRJeDtuSECMh:TaXOSYr1Kfu9HNOV21GRJGt4J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442c1266cf3fbf5ba52b334ad5b509cc_JaffaCakes118
Files
-
442c1266cf3fbf5ba52b334ad5b509cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE