Static task
static1
Behavioral task
behavioral1
Sample
170b81f5d843c59354eca54b1af249ca_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
170b81f5d843c59354eca54b1af249ca_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
170b81f5d843c59354eca54b1af249ca_JaffaCakes118
-
Size
46KB
-
MD5
170b81f5d843c59354eca54b1af249ca
-
SHA1
6d3ae3ffc96de55dcdc7b9d035cd4ca72ef956ff
-
SHA256
73c471b6e672add1229504a238029a198127d0137ea682e68d819cd9e85e464b
-
SHA512
c8977c8f1df32ac705f41570483da9ddd902e6d6e41ead3b3315dabb5261b9d95e6bc9644c93f635dcbe99841588b64e3a14758d1b6ad38d7a27f2ff40bbc2fa
-
SSDEEP
768:1nJxOLPfnRxBCyVm/5ZE1GT7LwfQeiyvoawXFafiFr1FDnMJPHkkTw/IChtHxvpZ:1CHA1kKiQePvoa26iFrTnUckMQCLxC8W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170b81f5d843c59354eca54b1af249ca_JaffaCakes118
Files
-
170b81f5d843c59354eca54b1af249ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Nspack Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BCPack Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE