Static task
static1
Behavioral task
behavioral1
Sample
1944e12197b84f2014bd2f7f872b72d1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1944e12197b84f2014bd2f7f872b72d1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1944e12197b84f2014bd2f7f872b72d1_JaffaCakes118
-
Size
316KB
-
MD5
1944e12197b84f2014bd2f7f872b72d1
-
SHA1
fb3f38b2c12993cdce8266315f74cf740a8f8496
-
SHA256
d875c38f2c9516997a34c0a53d22b6f34249c4d3498be4098ff3631712165328
-
SHA512
a74af201c8b5d2fe060fbfa0b8e1abac3fb892d6937b5ac47179faaa560b5950ea744043ce247f621f33c8375e334b37d18e5d7e0384e2bebeec1c6347666605
-
SSDEEP
6144:iXBc0kQxefqGUMw1xL2uSRuNBmlwY22vqLL20dA7+93w1aWM5:iWQxefi1xFmuNBhYZJ0dA8h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1944e12197b84f2014bd2f7f872b72d1_JaffaCakes118
Files
-
1944e12197b84f2014bd2f7f872b72d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
789 Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
456 Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.123 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
678 Size: 287KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
666 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE