Static task
static1
Behavioral task
behavioral1
Sample
98f9ee571e870f3daa15f8423824af81_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98f9ee571e870f3daa15f8423824af81_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
98f9ee571e870f3daa15f8423824af81_JaffaCakes118
-
Size
153KB
-
MD5
98f9ee571e870f3daa15f8423824af81
-
SHA1
768a0dff5d18cfe091811c63f427b2af388a79d9
-
SHA256
52902a5fc6e76ed19a2230ced42135155736d4b88a223561bc5fe3813e3859fc
-
SHA512
b8fbad95d28fa00a0666c1d23a8493a5c3c3eb76e632af4ab4e13eeacd2d93f221a366f671856727b80d34cce4792f817af3edcacbf9753a287969e4a4519932
-
SSDEEP
3072:9AdeOV73dOE8FDU5tg1ZS1HN13Vi1zhyvb8E:QF73iF45tgTS1HN1g1FyvbP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98f9ee571e870f3daa15f8423824af81_JaffaCakes118
Files
-
98f9ee571e870f3daa15f8423824af81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ