Static task
static1
Behavioral task
behavioral1
Sample
943b1ac2aabb13ac88864962915711c0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
943b1ac2aabb13ac88864962915711c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
943b1ac2aabb13ac88864962915711c0_JaffaCakes118
-
Size
172KB
-
MD5
943b1ac2aabb13ac88864962915711c0
-
SHA1
5306099a2f95eac8989f3ca5552a47f528efdb1e
-
SHA256
40e9b520b2cb035e988b00d0f14792fe6e9069c96d1810eb065819feb9d42202
-
SHA512
a92419a925b54aece310ae7ceb769d89edbf8cf44105f83a7f642996a9aa78530ee3a08189b28909fe8dbd7c8262be996de4b4fe74fde40f027062775e5eafe1
-
SSDEEP
3072:Y3uJFg0z3CqLCarYI24j7VvxKiBwX2XMnRmd/wRX:YeJCU3NYITFvxKiBwX2X8e/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 943b1ac2aabb13ac88864962915711c0_JaffaCakes118
Files
-
943b1ac2aabb13ac88864962915711c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE