Static task
static1
Behavioral task
behavioral1
Sample
09da65658d11c93b07f076738c4e2055_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09da65658d11c93b07f076738c4e2055_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09da65658d11c93b07f076738c4e2055_JaffaCakes118
-
Size
899KB
-
MD5
09da65658d11c93b07f076738c4e2055
-
SHA1
4a84daf9e0aef3a690c33d0f09be370087485170
-
SHA256
1d9991343a2118b3bac37a82d0b51de0af88f670873e939fd89504a864d9434c
-
SHA512
ee68d049add837aa8655d9ee7a94dade4afa0dfc729fbd483076f4cf0b0a48b950e3018484ed09e5a90417b4e9fa65391b7181afb565c59e7a127a502347f614
-
SSDEEP
24576:rYt7YWMli8vPZrjIM1etWfDMjZpf9lU9S:r67sY8vPZ/1o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09da65658d11c93b07f076738c4e2055_JaffaCakes118
Files
-
09da65658d11c93b07f076738c4e2055_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
YMY Size: 483KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YMY.LDR Size: 415KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE