Static task
static1
Behavioral task
behavioral1
Sample
007f485b70277dc3d8a978edfd561241_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
007f485b70277dc3d8a978edfd561241_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
007f485b70277dc3d8a978edfd561241_JaffaCakes118
-
Size
5.5MB
-
MD5
007f485b70277dc3d8a978edfd561241
-
SHA1
462d813115a1435ab9235ad4f02d1df2660ab847
-
SHA256
330721800674398e1a450deb059418e7dd7758eec2aeccfa1fe054eeb0850e4a
-
SHA512
3b8139a4375561d8979e2aa25b4fc21eedea74f909e0909c38647d4ca84d15e8ee435377f1714f910914107306da9c9adc0e6316d287ed3808796ab3dec59e28
-
SSDEEP
98304:OoskEEoskE0oskEeoskEkoskEWoskE4oskE0oskEYoskEC:X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 007f485b70277dc3d8a978edfd561241_JaffaCakes118
Files
-
007f485b70277dc3d8a978edfd561241_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 918B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE