Static task
static1
Behavioral task
behavioral1
Sample
09868c9b292052de20917253a609e673_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09868c9b292052de20917253a609e673_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09868c9b292052de20917253a609e673_JaffaCakes118
-
Size
179KB
-
MD5
09868c9b292052de20917253a609e673
-
SHA1
d2993c96321f17d70bce25cdf449c57d6df593be
-
SHA256
c2563b3a4bbbba64c59a5c4529287fe2d4a7eb672107fff2228f4a7eb2afd6f4
-
SHA512
d2a123afc56cbb310de30731e748bf65b917212ed86c49415251d512791903980ab718eff36da16fa7f674073335867396e766a5332356ed5fbd505965fb8a9c
-
SSDEEP
1536:mBLc2rQ+YlLU5K/kzaquLO1oOOSkYeJpDMXX8aOvpvR9AwZyF:mBIBnpH/8aquL5SgKKvBMM4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09868c9b292052de20917253a609e673_JaffaCakes118
Files
-
09868c9b292052de20917253a609e673_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NQH0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LME1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stub Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE