Static task
static1
Behavioral task
behavioral1
Sample
03839810fff0b090321d113752d24582_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
03839810fff0b090321d113752d24582_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03839810fff0b090321d113752d24582_JaffaCakes118
-
Size
17KB
-
MD5
03839810fff0b090321d113752d24582
-
SHA1
c51d57984d7cc9580ae35c3709d0033239446fd2
-
SHA256
a4f2db270e15ca4b29e91a2829879736ecf4aaf228138ab00f4c169e6e9d7e6d
-
SHA512
d909821e6b5afcd78ae8d74ff4781ef2ec57c8cc1750f0cd8cf8e96308eaf8fae39881b7ded06d76e08e2524e15da78921381a5173705b8897cc7dc88b89f5ad
-
SSDEEP
384:A8rF2vDSLzxOpib0LuGsHKP8Y0RgxrlOUl9Gcyo2tyROv/dNWyCms:DrF2OLzcpi42KE9gxZO69HytyRE/dNWp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03839810fff0b090321d113752d24582_JaffaCakes118
Files
-
03839810fff0b090321d113752d24582_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE