Static task
static1
Behavioral task
behavioral1
Sample
0487ba59c13d14aa4982a2f689ce6732_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0487ba59c13d14aa4982a2f689ce6732_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0487ba59c13d14aa4982a2f689ce6732_JaffaCakes118
-
Size
119KB
-
MD5
0487ba59c13d14aa4982a2f689ce6732
-
SHA1
966db86b3f3a846c470a083133029eb77e453e1d
-
SHA256
6e9adf518cb63afa82644857a66b065c802d9b2abe5ab192434b3588f6618295
-
SHA512
4fdc84c3ce660ffc691468fdd120fff429c81ed906183b23ff15b5db7d977d24496cffd8ad19315aa4875b8e990e4eddca755684bc2b75d95a4c4796c7c77c8d
-
SSDEEP
3072:fWf97lZeVf+ZCviG2YGwKdQAxn9rVGNXX2Ejj4o:sZaf+JdHwKeAx9rVG9X2EX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0487ba59c13d14aa4982a2f689ce6732_JaffaCakes118
Files
-
0487ba59c13d14aa4982a2f689ce6732_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ