Static task
static1
Behavioral task
behavioral1
Sample
9c7e3d0c123cccc0f6e7910f7950f629_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9c7e3d0c123cccc0f6e7910f7950f629_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
9c7e3d0c123cccc0f6e7910f7950f629_JaffaCakes118
-
Size
481KB
-
MD5
9c7e3d0c123cccc0f6e7910f7950f629
-
SHA1
16a859da7617195b4762f5b8d9284109219a9a0e
-
SHA256
255f48e3dbb58263a8ce7861bc28fa56a5f8a5ed4cb19ad57555050ab71d37ca
-
SHA512
beb1cc8080ffc0a9fd0d3c1867ead73ff392845d33e5d7b38f6d9aae279c6b0c53f1c0f761978a5f1e0447efd01d8a1668f96c5e285b0e9198df2437f398cd99
-
SSDEEP
3072:d9H81PnJI1dA1BJa5+9f7DKD9BSQcIQvZ3vCZZt4XARFnk81W:/kvZiZW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c7e3d0c123cccc0f6e7910f7950f629_JaffaCakes118
Files
-
9c7e3d0c123cccc0f6e7910f7950f629_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ