Static task
static1
Behavioral task
behavioral1
Sample
f590443fb7bec21ac4223f57da55d190_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f590443fb7bec21ac4223f57da55d190_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f590443fb7bec21ac4223f57da55d190_JaffaCakes118
-
Size
184KB
-
MD5
f590443fb7bec21ac4223f57da55d190
-
SHA1
8e1e3ab07a7514a62c37d142dafb0e830201b65e
-
SHA256
502341d6201d4292276f69d8c47b3fdbeecce2277da91177acc67119a6d8a8b1
-
SHA512
eb85ccf411fabe38ebd1afc33205d5eef16bc51223ac2b6a0db41d0c6781b274274fb6024c7e1300c817a2c986537cee99f249ff7b6dcf66b9566d74b064f728
-
SSDEEP
3072:vbHBo0RQWA0bOjtdTRcozRbOw36K8ZIjD9x8kP177lPdpFx:vbhof70bedNcozMO8I7lPdpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f590443fb7bec21ac4223f57da55d190_JaffaCakes118
Files
-
f590443fb7bec21ac4223f57da55d190_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ