Static task
static1
Behavioral task
behavioral1
Sample
42880846d22c201677dc96fa2d699944_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
42880846d22c201677dc96fa2d699944_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
42880846d22c201677dc96fa2d699944_JaffaCakes118
-
Size
377KB
-
MD5
42880846d22c201677dc96fa2d699944
-
SHA1
17478e4735bb2415b6fa125029d5904f34df6e8d
-
SHA256
70e9e602b97d5f690af5727c2644a693710cabbdaf2af8dad2be0f41e820c221
-
SHA512
b009fef43bd20221716798fcfd802cf60be5571d46dd1e21e3d1bd6e5d56e48b832de20507781875b6930fd7479d5d314fe16d18a5b479ca26df17fedcf98577
-
SSDEEP
6144:puJnff1XsD6dWLio5sKCyiWyMBXuWc8tITPXny5MRLkGaWCF9zzeJEqmatYuIWW8:pupfLoLiI7zyMPcHfny5M5lL69/eW7uj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42880846d22c201677dc96fa2d699944_JaffaCakes118
Files
-
42880846d22c201677dc96fa2d699944_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 376KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE