Static task
static1
Behavioral task
behavioral1
Sample
955a1e815d8fe27eb2a4b6bb49d3dd7c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
955a1e815d8fe27eb2a4b6bb49d3dd7c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
955a1e815d8fe27eb2a4b6bb49d3dd7c_JaffaCakes118
-
Size
56KB
-
MD5
955a1e815d8fe27eb2a4b6bb49d3dd7c
-
SHA1
8a8a64e80d916dc9dc322da6e0329795b63dd556
-
SHA256
1137191705e6eea5b86ab1f19b198614ab6c50e62ca4ba0817d088a25a9fa195
-
SHA512
be081a2a49d5bddf1ebd8f71db902888be289e79b501e1afef675601d4208aa4d4ec5fb41c5ca5887fcb074d03d8a8c7d2741d754b38d920f3f2180c7bb35de2
-
SSDEEP
768:c9bVNnCkKM10M1h+9/WhBhayqc0TQfOXnCimv:anCkKM1Xh+M/3CCimv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 955a1e815d8fe27eb2a4b6bb49d3dd7c_JaffaCakes118
Files
-
955a1e815d8fe27eb2a4b6bb49d3dd7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ