Static task
static1
Behavioral task
behavioral1
Sample
18359f25d69d8e1f4f4b9aa7896232bc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18359f25d69d8e1f4f4b9aa7896232bc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18359f25d69d8e1f4f4b9aa7896232bc_JaffaCakes118
-
Size
280KB
-
MD5
18359f25d69d8e1f4f4b9aa7896232bc
-
SHA1
bfe9fca17484ed3e49c01c3ef3bcc7547d4d7168
-
SHA256
e7bad0b1e60875c1110aaf3186faf76a8c0853f98df9a0ffb049d6099c7beeed
-
SHA512
2cb217c96119277620efe56666a6ad8bc2f7b91d4a1754a25d5d5a61593ed7ac7b834dc173903398ec98330622bb1b224065fc76096b20238541f1cf03e10be2
-
SSDEEP
6144:UZ2iHqYc5KxgOZg9uLjEayrw914si4kwP/Klyj7Kw0G:u2ikygOZKKjEXrw9esi4r37pf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18359f25d69d8e1f4f4b9aa7896232bc_JaffaCakes118
Files
-
18359f25d69d8e1f4f4b9aa7896232bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
= �o0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
= �o1 Size: 273KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
= �o2 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE