Static task
static1
Behavioral task
behavioral1
Sample
07d2e37292182064aa05fbd3076c2268_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07d2e37292182064aa05fbd3076c2268_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07d2e37292182064aa05fbd3076c2268_JaffaCakes118
-
Size
86KB
-
MD5
07d2e37292182064aa05fbd3076c2268
-
SHA1
69c36bd5d9e906a150962f305cf4c0c568dbb878
-
SHA256
e40dc9086ed6a70968b9817291a38d498a7804829d455c5819303a98e3ff4f93
-
SHA512
43c4137b51f7bb5d13dc06ef0a0a7d3179ef388d47ca38246ad71d9495eb50385c59347c5e06f72b1106b93d7067b11fa73affd713f37d644b1c19d5ff2bfc3e
-
SSDEEP
1536:ymPWc2x43YclqlMv2wdRufAwY2TPgKNmT2pdiLaJgGu+93o6WUxpMv2wd:ZxqljfbBNmTrLaxul6Wspu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07d2e37292182064aa05fbd3076c2268_JaffaCakes118
Files
-
07d2e37292182064aa05fbd3076c2268_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
np Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rumotu Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7kbfs Size: 4KB - Virtual size: 585B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE