Static task
static1
Behavioral task
behavioral1
Sample
4632ff9b40848ef2eb2ecb11110b1efd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4632ff9b40848ef2eb2ecb11110b1efd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4632ff9b40848ef2eb2ecb11110b1efd_JaffaCakes118
-
Size
102KB
-
MD5
4632ff9b40848ef2eb2ecb11110b1efd
-
SHA1
0546834d25834818a16daba94de34348c6e80f75
-
SHA256
7de07d56d80c33989c4e22a1fd7d9ed1acc8ebb37d489b6f15daf5d06d3066fc
-
SHA512
cac529626bef3d22244b2edccef702f08ccd2e063b7d31c94a64c694981ceb09f1821bccdcf8fdde3617d01ead6b1d95c1963266e5549b753a05871be4043d2f
-
SSDEEP
3072:S2jo1VQCnaAfl0TJOCbWOnZnUoRcmPbnjK:SbkCnabwOnZnCmjjK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4632ff9b40848ef2eb2ecb11110b1efd_JaffaCakes118
Files
-
4632ff9b40848ef2eb2ecb11110b1efd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE