Static task
static1
Behavioral task
behavioral1
Sample
01827d8e8a1a72e520c0f66a1c398047_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01827d8e8a1a72e520c0f66a1c398047_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
01827d8e8a1a72e520c0f66a1c398047_JaffaCakes118
-
Size
45KB
-
MD5
01827d8e8a1a72e520c0f66a1c398047
-
SHA1
7e62a8823ad5217630f0c8302ae463a2eee55948
-
SHA256
fbd164ba662eb44471559647f820aff04a06d0ce91b1944b7fab7468373a1271
-
SHA512
bf36e10cfa3f7677e34f121b8b7bffbbf2827dc53a96d28c2c23f0f07229b3d73e7a5abf86bb00886d1408546c45838bbf6a6b84bc9c5c409eadb599f7c72bf6
-
SSDEEP
768:Qw1md/3gGa+R3v+JNe+mP4j5/nvVpOW38rrLqT9zM4sfny2QYXNfN8c:Q5qGlRGNjmP4j53OW3U/+9zM1/DFNfN9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01827d8e8a1a72e520c0f66a1c398047_JaffaCakes118
Files
-
01827d8e8a1a72e520c0f66a1c398047_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
code Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE