Static task
static1
Behavioral task
behavioral1
Sample
01056488a4b90208122e50811b85f36c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01056488a4b90208122e50811b85f36c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01056488a4b90208122e50811b85f36c_JaffaCakes118
-
Size
99KB
-
MD5
01056488a4b90208122e50811b85f36c
-
SHA1
bcdcad4aac4ea1d829c40456f05e203ad76d5ea5
-
SHA256
f386064f41c7bdef561beeb3377f71e3f5cb4b42f6e08740be2f8629ecb07c91
-
SHA512
7e92b04f9b58e89979c8320f31fb4715de5fd17a5c9a20ac92421cda39e55e2c85a2483f4a6f495735499e98db3b3efa5453064652d082504d5dad582c939d63
-
SSDEEP
3072:fZ/Zx69drcFNKZY3cs4z4xKwr04JUImQG69MM8u6s:fZ69drcF0js4kxbzJUxQGPM8ud
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01056488a4b90208122e50811b85f36c_JaffaCakes118
Files
-
01056488a4b90208122e50811b85f36c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
3j2g0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3j2g1 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3j2g2 Size: 332B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE