Static task
static1
Behavioral task
behavioral1
Sample
02179f3ba93663074740b5c0d283bae2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
02179f3ba93663074740b5c0d283bae2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
02179f3ba93663074740b5c0d283bae2_JaffaCakes118
-
Size
261KB
-
MD5
02179f3ba93663074740b5c0d283bae2
-
SHA1
083fcd1ea4976fd9739dbc738a2f41faee0e0256
-
SHA256
39fb2b683dacbaceb78995cd4cedff87ae1514e8aa3678de5deec7ccec187680
-
SHA512
4a4d54363edb14a13d0cd9caef8219ba3dfb3ee40b247d8ccc41c5d0d385bd71226cffdeca057ed5e61b64e08572660f43d9bb94ff729aea2a0a9e2d16e4805d
-
SSDEEP
6144:1J4KYvxupv2mlkmJhJP7JC9AnruTag4lsFItEnYFupq4gIa:P4K+xusn9ArCag9FItEnmupq4gIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02179f3ba93663074740b5c0d283bae2_JaffaCakes118
Files
-
02179f3ba93663074740b5c0d283bae2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 260KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE