Static task
static1
Behavioral task
behavioral1
Sample
ca38c56d50275fde691e1734bc70ce74_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca38c56d50275fde691e1734bc70ce74_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ca38c56d50275fde691e1734bc70ce74_JaffaCakes118
-
Size
188KB
-
MD5
ca38c56d50275fde691e1734bc70ce74
-
SHA1
65a27bb29f96a3c110b337782a4ca1e35f703a63
-
SHA256
f26ab08190926a79a5d7fea21beaf76dc75214e33998fdd509ac4e714fad1a36
-
SHA512
389be2969d6de7a4af68f5362b93510c1bb194162f7652e8ef147e1e7cee5da4960775d4e893b50fca26026d25e85e8c6110ce9c6b5331bfcaf4a56bf50da0e8
-
SSDEEP
3072:mU4Qoixiwc0IkOj3qD1/X7yb+GAJsFOmIxdi0mgilv1pFZ:mU3oEpIkEqR/X7IUvrilv1pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca38c56d50275fde691e1734bc70ce74_JaffaCakes118
Files
-
ca38c56d50275fde691e1734bc70ce74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ