Static task
static1
Behavioral task
behavioral1
Sample
f7469daf7aea6fc637e3368f58856d92_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f7469daf7aea6fc637e3368f58856d92_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7469daf7aea6fc637e3368f58856d92_JaffaCakes118
-
Size
20KB
-
MD5
f7469daf7aea6fc637e3368f58856d92
-
SHA1
8f216fff6dc71b8b02bd020ab60bef6303c80366
-
SHA256
6dca6432616993fae4113f47f0d63cf869a1b2dd0950f633bba5fa9d66b02d82
-
SHA512
4af4a6cd52139f8e6f753b6e979ea3087b9adb03bafc9f154ed5b999c0e2f630ffa0fb2d021f1a5330e828f0cf5b1222289fab658b25a63c61435e152c2df61c
-
SSDEEP
384:YoRtdZWDsNGCnUtYN2ouNU2xbBUp27RsJE9aqXrsS4W6BRMdfd14le:rtdZWDaGCnUSXeCMlsJWXrFuoMY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7469daf7aea6fc637e3368f58856d92_JaffaCakes118
Files
-
f7469daf7aea6fc637e3368f58856d92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE