Static task
static1
Behavioral task
behavioral1
Sample
09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118
-
Size
2.5MB
-
MD5
09b9978fde254c1d97492edd3bc8dcaf
-
SHA1
9b6cdf78911a865f9fa19708f110ee8617b4fc06
-
SHA256
a16987d502f2844d5fa27021c9b5a4b1496598d05ad46fb199f88791ffb605c3
-
SHA512
94cbb9369084bac12c52b3cbd474597fb0b5707609bf22b1a4cd5b0f4c17ed31e6b006b7598a12a47f22ee2f9cc1d69ced12d22d7dd808f89c0d916a8ac3a5de
-
SSDEEP
24576:UuhaLZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NI8+ZyOXeZJ8NIG:b2W8+W8+W8+W8+W8+W8FM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118
Files
-
09b9978fde254c1d97492edd3bc8dcaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ