Static task
static1
Behavioral task
behavioral1
Sample
009625832b139e50350e5d93a95ced8c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
009625832b139e50350e5d93a95ced8c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
009625832b139e50350e5d93a95ced8c_JaffaCakes118
-
Size
590KB
-
MD5
009625832b139e50350e5d93a95ced8c
-
SHA1
11b7ba65dd693450bf4d27081c62dd618781c891
-
SHA256
e297f720109f5620bb4673659ccbef317c2c5b3fff94247b3ce282b33581e079
-
SHA512
40f81c37dbf93131c50822be7c2a63463e3042a952c2942aaeb73d110c244907e830f635e73a1e9e79c263bd9359d2bef5e0cb8a7b4cb6d599fcd23cbd8e6f82
-
SSDEEP
12288:/p1lHjn9SSmieQSP2UZMpBGTMxnmGm8/vSwgZWLdHLxdt0Tr:/prH5SSnStMPG0mGm7wvd9dtGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 009625832b139e50350e5d93a95ced8c_JaffaCakes118
Files
-
009625832b139e50350e5d93a95ced8c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.qxot Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zut Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.atgp Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ