Static task
static1
Behavioral task
behavioral1
Sample
037fc61f4195eccfd8f504c6f6112141_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
037fc61f4195eccfd8f504c6f6112141_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
037fc61f4195eccfd8f504c6f6112141_JaffaCakes118
-
Size
2KB
-
MD5
037fc61f4195eccfd8f504c6f6112141
-
SHA1
b5222347e27d9cea4700a638d08102c4485a9f90
-
SHA256
c46eac6c43b341c64a7f692c5af1894c62622ee60574d76e8717d837ac932f92
-
SHA512
9c12c1911e38506e92f1ec3adf22dbc143e5f7261ac04d0b3e96a77b4ccee957166c6a2df2f2f8010b1ce80abfeb9cc99bb3e1bc694db58344a109e5c7396db7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 037fc61f4195eccfd8f504c6f6112141_JaffaCakes118
Files
-
037fc61f4195eccfd8f504c6f6112141_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 331KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE