Static task
static1
Behavioral task
behavioral1
Sample
104774ecdce897e9a586089473d40284_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
104774ecdce897e9a586089473d40284_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
104774ecdce897e9a586089473d40284_JaffaCakes118
-
Size
39KB
-
MD5
104774ecdce897e9a586089473d40284
-
SHA1
ec0161aab43ec7b9db2b7ef309cbc34e4c03ce06
-
SHA256
952d685ec0e7e4694f0260cea68deccc4dce78f4d4bef4b76577049029081aa5
-
SHA512
5ee7c2f0a22d36361a3d9fb081cd455bfbb21f74d879b64624c65d3625035b39aa675d33f6caf8517dc664d598cb8b6ce42c3387a8d802307aa95931cbcb817f
-
SSDEEP
768:2XGX6KhLoC3MXr/ukUy6Rk7VDnUMPKUU2jXg9dyijZOchjazM:2XGX6MLoCcXKkb6GJDnU0KUUQXiZbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 104774ecdce897e9a586089473d40284_JaffaCakes118
Files
-
104774ecdce897e9a586089473d40284_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
omzu0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
omzu1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
omzu2 Size: 511B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE