Static task
static1
Behavioral task
behavioral1
Sample
01f7cea47f478faaff52bdc325e70ccc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01f7cea47f478faaff52bdc325e70ccc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
01f7cea47f478faaff52bdc325e70ccc_JaffaCakes118
-
Size
79KB
-
MD5
01f7cea47f478faaff52bdc325e70ccc
-
SHA1
1cda150d84ef16f9a33a18e10b9d54edf781f893
-
SHA256
b518654c3c41a8989e9c8665972bf79e5913cccbde1dba25790c9e4198fb26ac
-
SHA512
52e9c1f74de21d3f20c138dbad8948e9564138feb811db88b9131df34f95e95d264cf639d27c905a32bd19fb69c744eefbf5b5e1a9d0e0638207a09b3b898227
-
SSDEEP
1536:thlEJEY9k/eM0NWRU56BRtD/CwZBH4NnaS1k6+Mnt7Ww6HzvtvNwpI:2EC6ezNWIut7CwZ14NnaSabGVovtvNwi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01f7cea47f478faaff52bdc325e70ccc_JaffaCakes118
Files
-
01f7cea47f478faaff52bdc325e70ccc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xxek0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxek1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxek2 Size: 423B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE