Static task
static1
Behavioral task
behavioral1
Sample
0794bb837988cad9b2055e08f274306f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0794bb837988cad9b2055e08f274306f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0794bb837988cad9b2055e08f274306f_JaffaCakes118
-
Size
33KB
-
MD5
0794bb837988cad9b2055e08f274306f
-
SHA1
6e744bce90a96164432975b616520198d58a4d8b
-
SHA256
c601df2bc0714e51f1797d72ae9f1ee093dbe817b248acb463d5525a3f82e75d
-
SHA512
e23967c2b93accd0aefbe4db5a73e865e0ad7614aa0fa6998f34bde6f3c2ad1346c3c9a7466b1fe540016711657d4905ec74f21ab8ce16845ddadf8c91c2e8ea
-
SSDEEP
192:IRY0+5IIkA5VCClflN8Td9aKQ3Rqfv/aIsYitzmwG1ZEKy+:IY0IksVtlflNm0K2RdWitSwG/E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0794bb837988cad9b2055e08f274306f_JaffaCakes118
Files
-
0794bb837988cad9b2055e08f274306f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Ghirai Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fearless Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE