Static task
static1
Behavioral task
behavioral1
Sample
1ee92d12bc8f3542904ffd8200f22d04_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ee92d12bc8f3542904ffd8200f22d04_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1ee92d12bc8f3542904ffd8200f22d04_JaffaCakes118
-
Size
490KB
-
MD5
1ee92d12bc8f3542904ffd8200f22d04
-
SHA1
2d3922d78fe212e9e8aca2c229a039a6daebe174
-
SHA256
1036235fd638bb7864fa44565f8efbb6af141b81b020431870eb3af45a6b2c66
-
SHA512
3e6041ac9a44b461250a3f9d9c7f5bae28025092f5f3c143bd018b4b98a8594799408b585ee94a12caf678ddde66b678868636dcce63f7cb658e3d965825f004
-
SSDEEP
12288:A3nK5TyX9ULgaQTIZgXIP83qiujZYMLma1/7wbBBVCf:gK5TyXC4kfiadsVCf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ee92d12bc8f3542904ffd8200f22d04_JaffaCakes118
Files
-
1ee92d12bc8f3542904ffd8200f22d04_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 485KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ