Static task
static1
Behavioral task
behavioral1
Sample
082d8adb3e0ddc32741ce15ed63a8997_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
082d8adb3e0ddc32741ce15ed63a8997_JaffaCakes118
-
Size
26.1MB
-
MD5
082d8adb3e0ddc32741ce15ed63a8997
-
SHA1
b283f1f0352f8c64571a788d6298b7b5f0e44d97
-
SHA256
d0facc3ea22b62361de79fb78697d03d0ed802fc15425b3dd7b64982baa4bd76
-
SHA512
e6a1f99a2a2cd2f7fdf4cc45192625abb8948c6147c95f9d228007b2d57ca82a9848d244f5952239ee839d92f2d9b416af78da0a2ad6902db387b2308ed88d34
-
SSDEEP
49152:XYgph7GBfWihDkYOMwwnMb4PmyVtUNVs/4MnYYJ2ZhqSGLHkJEMh:XX77GBfWLYOXwnS4rVtUNVtIDQh
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082d8adb3e0ddc32741ce15ed63a8997_JaffaCakes118
Files
-
082d8adb3e0ddc32741ce15ed63a8997_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE