Static task
static1
Behavioral task
behavioral1
Sample
802eabf68e9d1b47303b170c9fc9c39c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
802eabf68e9d1b47303b170c9fc9c39c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
802eabf68e9d1b47303b170c9fc9c39c_JaffaCakes118
-
Size
396KB
-
MD5
802eabf68e9d1b47303b170c9fc9c39c
-
SHA1
8ce653d07689739f1d3191b5975f7c8669ee94e5
-
SHA256
ee65bae131bb288bd69de89b1f9666bd4bf0f3c1ce98d5705e5e3cbec00f2455
-
SHA512
bc877e9c54da01679348d29d13357f33d7b40b3733116c9a3e9b11611cbc2cb07e04e27352852cd11c79b52bcebb463576dc3098475365489191a5ede922af2e
-
SSDEEP
6144:+Md2jaIGrSYUNHtEM0NzjsNOhHCwKNnoSb4vaZTJBP:+MwjazSYUxKM0djstBP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 802eabf68e9d1b47303b170c9fc9c39c_JaffaCakes118
Files
-
802eabf68e9d1b47303b170c9fc9c39c_JaffaCakes118.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mods Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ