Static task
static1
Behavioral task
behavioral1
Sample
971eb3f909c969d161fad49f971140de_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
971eb3f909c969d161fad49f971140de_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
971eb3f909c969d161fad49f971140de_JaffaCakes118
-
Size
466KB
-
MD5
971eb3f909c969d161fad49f971140de
-
SHA1
fa1ebb7678a9e1b22f32cb1cdfa33c8797a86339
-
SHA256
f71220267f93672bda589a38d72c3ac9b18a4700e82365f1dbbf09c149dd46cf
-
SHA512
28aace2e0b143ab34c796d11f217842144fd7d011fce7212fe37efad64d9b835c92bd3072932bad14439f66e2120d9cc82cf9c5a88e4506139507c40755f50e2
-
SSDEEP
6144:UZfec9EbXDk6RkdKJrG1VVE+I5E2EBE2EorG1VVE+Ih/UOPSe570Szp3y:UZWtI6RkcuVMkupOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 971eb3f909c969d161fad49f971140de_JaffaCakes118
Files
-
971eb3f909c969d161fad49f971140de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ