Static task
static1
Behavioral task
behavioral1
Sample
7b9a4073d59ee59f3a1465604fc96f50_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b9a4073d59ee59f3a1465604fc96f50_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
7b9a4073d59ee59f3a1465604fc96f50_JaffaCakes118
-
Size
963KB
-
MD5
7b9a4073d59ee59f3a1465604fc96f50
-
SHA1
643bda3a74840539204f5c109ce00504393e05ae
-
SHA256
6ef80713c58a1ce14c5e97d9f71923be6850a8a36409824fced7a6cec0e63c9a
-
SHA512
a797a7d9cca588188d6464100a0a86076a70c9964549edf1e15d5c0cb803b06df06c6f9d236fe6ae1dc164c0c5fcb41b07015ba38ec90e476985ef519fb7dc21
-
SSDEEP
24576:8o/imoReMjO2NPt7XktKakWCNIam2fYVFFmv:8coQxSBeKeiOSiFmv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b9a4073d59ee59f3a1465604fc96f50_JaffaCakes118
Files
-
7b9a4073d59ee59f3a1465604fc96f50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ