Static task
static1
Behavioral task
behavioral1
Sample
021869c55509c4a6dbca256eb3292389_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
021869c55509c4a6dbca256eb3292389_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
021869c55509c4a6dbca256eb3292389_JaffaCakes118
-
Size
244KB
-
MD5
021869c55509c4a6dbca256eb3292389
-
SHA1
bde8cd1a37d1048192562311fb66c6567c0d6d00
-
SHA256
15094e8da89af2a484adf17e40fd5fc6c36fd8ebcc8ae73537ae5d03f61fb964
-
SHA512
fa650922644666efdf7c45fb39ecbe383d50315ec437180727133867e17254157d7c8cb5f19785b8879503e5715354d13574829983cde9d7517136c60e0fa557
-
SSDEEP
768:kbUoUbdm6NDl0u87uWSNUYXz8yVbh4mD0aX7taYqMPj6WdntS4+3q:kbU4eP87u9NbIGF8IwNI9S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021869c55509c4a6dbca256eb3292389_JaffaCakes118
Files
-
021869c55509c4a6dbca256eb3292389_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ