Static task
static1
Behavioral task
behavioral1
Sample
202a28f63d458e9ebd5082fc331287d8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
202a28f63d458e9ebd5082fc331287d8_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
202a28f63d458e9ebd5082fc331287d8_JaffaCakes118
-
Size
1.8MB
-
MD5
202a28f63d458e9ebd5082fc331287d8
-
SHA1
42e75818b7799db7df31e17f4c39059175a54ea2
-
SHA256
492561a055d453b20f1a2900c9a3b552140c6adc0094d679a4488d621d4056a8
-
SHA512
11e86399f0979b961f75b184dcd7817acecf827e1515aa8293b278e4a9cbe70bbc8c5bfc8a044921aaaa73fbbf0853e687659b811b1ad47946a94fd8ede7756c
-
SSDEEP
24576:eIGZZJkLzJ+AUTpldX2BL96H0QeZjA56lzf96H0UfPi1dJU4hlzf96H0DiKlz6d6:eI3LhB8H9CXlMHH/4hlMH8lI6Vsq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 202a28f63d458e9ebd5082fc331287d8_JaffaCakes118
Files
-
202a28f63d458e9ebd5082fc331287d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ