Static task
static1
Behavioral task
behavioral1
Sample
054357104adb6813956e1ba3e10f3332_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
054357104adb6813956e1ba3e10f3332_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
054357104adb6813956e1ba3e10f3332_JaffaCakes118
-
Size
119KB
-
MD5
054357104adb6813956e1ba3e10f3332
-
SHA1
f5f669ddfb54c9dfcc11b9cc03397cfe209ae2d2
-
SHA256
24e0d393898aa98b77baddc0840d68caf95dea5e3e60c18f32ca5da0c27c31d6
-
SHA512
19b69eca93535b782a07699b075482770a31107c62529b8c2d8090bdd86ccca3a345b2276fd1755d55a2dc5e31f4055120e2c3fd2ab96f3a31caabe83b0c3bcc
-
SSDEEP
3072:hnvfyJm6m1pMO8uGF1zmZnqOBx4J2vNbGfvGnd3gW5ZM4/ua/ycihG:Q2piLF129NdndPZMTmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 054357104adb6813956e1ba3e10f3332_JaffaCakes118
Files
-
054357104adb6813956e1ba3e10f3332_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wyrscen Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE