Static task
static1
Behavioral task
behavioral1
Sample
12db1dff91c33f10a3ca1f81b348ed70_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12db1dff91c33f10a3ca1f81b348ed70_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
12db1dff91c33f10a3ca1f81b348ed70_JaffaCakes118
-
Size
1018KB
-
MD5
12db1dff91c33f10a3ca1f81b348ed70
-
SHA1
4c3873d4c79fa382cf61f90d546e04189fd10d09
-
SHA256
0b2de7ebd215130f908c5ec3aa984e28a6bd6f69ba16aadf19c52b5551d213e4
-
SHA512
63fa1dee21753970ddedd81322512002770f11169ef342e32bfd24a04677e5745779bca53c550a4271f2df3e31c6f44d036d7417c090d67e47f4681c34819ecb
-
SSDEEP
24576:5g06cm8a44Yp5yqp9osk0koaJnG4boz/Hglpb:68jIU9Lk8aJnGGo0lpb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12db1dff91c33f10a3ca1f81b348ed70_JaffaCakes118
Files
-
12db1dff91c33f10a3ca1f81b348ed70_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 708KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ