Static task
static1
Behavioral task
behavioral1
Sample
f8a4105d9e5577d3bde604f1d12af671_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8a4105d9e5577d3bde604f1d12af671_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8a4105d9e5577d3bde604f1d12af671_JaffaCakes118
-
Size
55KB
-
MD5
f8a4105d9e5577d3bde604f1d12af671
-
SHA1
32973ffee51da2207352df23f223497a52a5559c
-
SHA256
6688f30fc21ae077f22be912c1eae2b7ce94264e889125c8b0595f22349cf0f0
-
SHA512
59b3eac76a0286bff942ba91f4423a7e0169c16b5d447aea33efe40cec5cf912919e567312cc892f137102a4a6e12080997e6ed8d0015937eea1899517309f88
-
SSDEEP
1536:oP+KqaDIeiMniUfyWO8kFUNwHQJWanCAa/N:ozqaM3M3kmQQ3CN/N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8a4105d9e5577d3bde604f1d12af671_JaffaCakes118
Files
-
f8a4105d9e5577d3bde604f1d12af671_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ddusx0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ddusx1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ddusx2 Size: 469B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE