Static task
static1
Behavioral task
behavioral1
Sample
09a5e7cd502018cc16414bb3e3f18199_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09a5e7cd502018cc16414bb3e3f18199_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09a5e7cd502018cc16414bb3e3f18199_JaffaCakes118
-
Size
307KB
-
MD5
09a5e7cd502018cc16414bb3e3f18199
-
SHA1
e985e6c0e029c8c8372989a6d8855cf0f286a0e1
-
SHA256
97daa21e51ac40ccae250c66abb70d0bc664ddcc831c15726ea85356cbc354da
-
SHA512
8eb7533d178db92df47315eaa15de395034b1b4636ee33753f15ec5ebded52fddb59cc07ee3bef772c9a2d1e4f67f45488a47526c1ebc293878d1ea480853e29
-
SSDEEP
6144:vU+47TyP4ODUgmJn1SaJKCcEjnACM60+/4iG37EEKm5DPPS:vj47TpODRo/JKhUnlMjRiYgE0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a5e7cd502018cc16414bb3e3f18199_JaffaCakes118
Files
-
09a5e7cd502018cc16414bb3e3f18199_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 487KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE