Static task
static1
Behavioral task
behavioral1
Sample
ede72101360641d69e652fdc6c75aa73_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ede72101360641d69e652fdc6c75aa73_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ede72101360641d69e652fdc6c75aa73_JaffaCakes118
-
Size
203KB
-
MD5
ede72101360641d69e652fdc6c75aa73
-
SHA1
5829a5a483a28327aabcb1cfb78ff25d4bb6684e
-
SHA256
4942fd9dc131d4c0c06928c152e58435c6aa50f0302eb5b88adac8d0d52098c6
-
SHA512
c4647d0ea602494e38e30457e8d458a9f175fb0c436e71db6293ba6e2e5e4f62b2a46723c10c3944f19be9d5dcdb47150808d45b143e228479d33c953cf9510a
-
SSDEEP
3072:B8xmM2B8tjM/lxkzOh2/XQbt34O9mHRWsaIU7D3DNh+DL4AxibSogb0:B8xmDmUAOhdd56/aIiBgX4Ax3r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ede72101360641d69e652fdc6c75aa73_JaffaCakes118
Files
-
ede72101360641d69e652fdc6c75aa73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txt Size: 637B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ