Static task
static1
Behavioral task
behavioral1
Sample
12e73cef8efc2fa2e71c09ce4ffa1ea2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12e73cef8efc2fa2e71c09ce4ffa1ea2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
12e73cef8efc2fa2e71c09ce4ffa1ea2_JaffaCakes118
-
Size
200KB
-
MD5
12e73cef8efc2fa2e71c09ce4ffa1ea2
-
SHA1
fff72f424b23aa3428a7a93e4d7dc3b442d2fdc9
-
SHA256
a11623edd1428aec67a6adb281f4c996c6393b99f83fbe4d7b1c5c924b5c76e6
-
SHA512
49909ba853015891ea97399ff4f6a852d55a7544bf49d519ec7298b4515df0e5c741592a305713eb916c4f0200d73f782a50ced82295ad7adaafc3a6f5ee1941
-
SSDEEP
3072:QD0VuCOwELrc/7Aj78vZWhyflvNuRVjFYrRHfkjje:NVukii7RflV0jV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e73cef8efc2fa2e71c09ce4ffa1ea2_JaffaCakes118
Files
-
12e73cef8efc2fa2e71c09ce4ffa1ea2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ