Static task
static1
Behavioral task
behavioral1
Sample
f8221d7169ada96a381846d18c87716e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f8221d7169ada96a381846d18c87716e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8221d7169ada96a381846d18c87716e_JaffaCakes118
-
Size
92KB
-
MD5
f8221d7169ada96a381846d18c87716e
-
SHA1
022b7f3b35f300311a0f74cbe968370e758bbfde
-
SHA256
a1d57236e4fe298891d2c9ed0cd42a90dc7276dffbdf5e8d45a0fc26f2a20b34
-
SHA512
a1a76ff422875d7ba5ced421c3b22cc7e2c148be2ef1c326de02a3e56f0faa6f38a632d678ae4801ae1fbdca9e7c82399859011364ff2506f62dc7e81e9b21b0
-
SSDEEP
1536:0kGe6rKulLN4KIxSHcNpRwSciH+NZrSq2iE1zbNZrSq2UCe:0kGeD2pXNoRwdaqz2t1zvz2UC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8221d7169ada96a381846d18c87716e_JaffaCakes118
Files
-
f8221d7169ada96a381846d18c87716e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ