Static task
static1
Behavioral task
behavioral1
Sample
002967a4c3a92696c6d575e40ac543b0_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
002967a4c3a92696c6d575e40ac543b0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
002967a4c3a92696c6d575e40ac543b0_JaffaCakes118
-
Size
15KB
-
MD5
002967a4c3a92696c6d575e40ac543b0
-
SHA1
0dda8775c4dd868e432dd50b29183323a8ad8d48
-
SHA256
c6a98dabac03c3d8180fc746d234a3aae63f4ea12ad6cbadf1575044111899bc
-
SHA512
01abe9c2d3982720b138561b75b74ad8bb10eaa2923923f7db55be4e3447a882cec0dff57a725a2aa78f91e3c865775ee792bc8809c1821d401eb9d8645eb383
-
SSDEEP
384:ILZeAbXv0tfYZyZsbJqo6nK5Vy9pQujJlsLzlIKZaHiQGUsAlkGrvnr0:UewMtA0sbJq0y9pQuN0IKZavnv7nr0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002967a4c3a92696c6d575e40ac543b0_JaffaCakes118
Files
-
002967a4c3a92696c6d575e40ac543b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE