Static task
static1
Behavioral task
behavioral1
Sample
14c01942c41dca6bca1b8121a6fe9a31_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14c01942c41dca6bca1b8121a6fe9a31_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14c01942c41dca6bca1b8121a6fe9a31_JaffaCakes118
-
Size
246KB
-
MD5
14c01942c41dca6bca1b8121a6fe9a31
-
SHA1
8d5d58598b822a5570cb28fe5077a630ff77878d
-
SHA256
7f3013f46565d29e25d2d1a077e88f3de07353883e66465ad64fa8591fe6b431
-
SHA512
db8b7298ce4bf72993895a9ac03bfd2ddb2bba8734c221f5b4bab274d4cccd166f6ad2678d3bcbb54728aa64b03f14c30829cb84f767f5f70598fd909c34dd7e
-
SSDEEP
3072:OqLUCsOokv0BXQFcaMckW5EtdaXuQG4C/j5xNCf1rtavCmMSLibc73tR9oOtgqp:JRsOok4raAda7Gj75xyqKmxictRSU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c01942c41dca6bca1b8121a6fe9a31_JaffaCakes118
Files
-
14c01942c41dca6bca1b8121a6fe9a31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EEO0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EEO1 Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE