Static task
static1
Behavioral task
behavioral1
Sample
115e69c2ca0b7bbf0df254f3560ffd0b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
115e69c2ca0b7bbf0df254f3560ffd0b_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
115e69c2ca0b7bbf0df254f3560ffd0b_JaffaCakes118
-
Size
704KB
-
MD5
115e69c2ca0b7bbf0df254f3560ffd0b
-
SHA1
3d938d8cfc5950c8deab1e340259785f917c5007
-
SHA256
b6fc571fd1bbc4966863e7f72ce73ad77ca6740636b373567be770d29f1f8bcf
-
SHA512
3cfe4ae85fde83a2a0a453dfd85ee15423303e7f5a9dd6059b47a6dbe23c57d886f271097342e13b14828990054fd706a0ce38b77788412977b9eeba2536a8f5
-
SSDEEP
6144:UZfec9EbXDk6Rk8KvGFrQZb++tdsHP4+QfI6UsrG1VVE+I5E2EBE2E4:UZWtI6RkNerQZb+md4w1U4uVM4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 115e69c2ca0b7bbf0df254f3560ffd0b_JaffaCakes118
Files
-
115e69c2ca0b7bbf0df254f3560ffd0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ