Static task
static1
Behavioral task
behavioral1
Sample
0617242c8bc316fff594d8f5392454ec_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0617242c8bc316fff594d8f5392454ec_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0617242c8bc316fff594d8f5392454ec_JaffaCakes118
-
Size
146KB
-
MD5
0617242c8bc316fff594d8f5392454ec
-
SHA1
37f77fd757f789b81d69c425aa50aa645424d444
-
SHA256
b237e7bb8107ffe8569d53d0baba855446619fb007cbdacc42accbf2f4c43ba6
-
SHA512
83db5a60c457f53716d3e3d03ff594df84ef50ecf472f4113848dd19a654ccb6e1b6c9e45a20a7b0507c95e5e0126093cc64d5b6220a574ec5eb3257af84c929
-
SSDEEP
3072:2BgPNB0Vt45gbrVKRCGI4HLlbwT8+INym7W6/owHvV0wbYfy0VE:2ENB04ObrFGQK79hHKwTv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0617242c8bc316fff594d8f5392454ec_JaffaCakes118
Files
-
0617242c8bc316fff594d8f5392454ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
v Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
afmb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE