Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_169a83dcfb228d5eb122550ce80f1d28.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_169a83dcfb228d5eb122550ce80f1d28.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_169a83dcfb228d5eb122550ce80f1d28
-
Size
530KB
-
MD5
169a83dcfb228d5eb122550ce80f1d28
-
SHA1
c600705136ffad46920fc93d6802d886a84a3078
-
SHA256
e591450b70a53ed0cd4b361761e1f8e8721f10cbebef0fa21502abb41df9276d
-
SHA512
c476eb8cb62dedfd3914e896986e60e10884ef2996b4c3096021ec9596dd489da1b1d4b74d738cda6d77030b0c42fdf57f71f2128c17f6e8ec3e31c13623d00a
-
SSDEEP
6144:00F2EEMHt8w7/iwNk1di3NVszgmRQhMixEgR9HD:DFnjbxNeWdm2qi6gzH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_169a83dcfb228d5eb122550ce80f1d28
Files
-
JaffaCakes118_169a83dcfb228d5eb122550ce80f1d28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE