Static task
static1
Behavioral task
behavioral1
Sample
31739ae06cd4c3e3c526adffd0b3077f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31739ae06cd4c3e3c526adffd0b3077f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31739ae06cd4c3e3c526adffd0b3077f_JaffaCakes118
-
Size
525KB
-
MD5
31739ae06cd4c3e3c526adffd0b3077f
-
SHA1
c59927a79479f0339cec326eaea40600380a8c3f
-
SHA256
158ed5112a5fe7e5454e1a03cc50e81b48aa62abd01776d32fbcb51ac60bcd99
-
SHA512
af7a9e310c2bfe0a7a1ecd710c13e1d62de4a84391364f37c90433c690db0c39c56777fb40df77691085ed0e0d5aeb9ec808b742ab504bc1f1ae75ee0148222d
-
SSDEEP
12288:XRskQL/w2RgLrV6fBOma9+54mZaH8Mjf6ormxnyHJ:Xbc/w2qLrVa32+umysyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31739ae06cd4c3e3c526adffd0b3077f_JaffaCakes118
Files
-
31739ae06cd4c3e3c526adffd0b3077f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 493KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE