Static task
static1
Behavioral task
behavioral1
Sample
2202346b18b1450c61c010710252fd3b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2202346b18b1450c61c010710252fd3b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
2202346b18b1450c61c010710252fd3b_JaffaCakes118
-
Size
176KB
-
MD5
2202346b18b1450c61c010710252fd3b
-
SHA1
9642d868797937aaba41a8400173243bc367c197
-
SHA256
603efad14c5991638ca160adaa725219d138bdfe92dd01e36d5dccdfb0a4ebe5
-
SHA512
e453ecf456e67c34e1cc32f743cd05b017a59d09e17811258d3409a15f2bea0e40980b7504a02b3d10c6d4c3dbbb04a01a23c65c0ae5691f3d7216ce02e2ef10
-
SSDEEP
3072:ui7o7VHprGPGlyvfB5D6pEdDXONu//847FRtoutZpJ6:ui7o7VJaOUnB51DXOv47FzoSfg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2202346b18b1450c61c010710252fd3b_JaffaCakes118
Files
-
2202346b18b1450c61c010710252fd3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.bud Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hra Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE