Static task
static1
Behavioral task
behavioral1
Sample
1973f0aedcf260f7351cc14bc0ed26a5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1973f0aedcf260f7351cc14bc0ed26a5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1973f0aedcf260f7351cc14bc0ed26a5_JaffaCakes118
-
Size
628KB
-
MD5
1973f0aedcf260f7351cc14bc0ed26a5
-
SHA1
7d432e71f120fcfb83ae83335abed4efb7a11f26
-
SHA256
89413191c5243654c846340089f839569afdf9b39ddeb5add315a7a983071b05
-
SHA512
a42b64648a1ce49e62495a1ed246b19e9bd8d8f258aef241cb63694a7ef023af5c9ac3bf8761f5d3159acd6f1141d7a941add9e199092887f26ba31c0d270877
-
SSDEEP
12288:Slk5e7HKDyLHNVrkiLlo0lUOHnno1rutHJmzgpbVPpu2/Nqj:Slk5e7yyZVQiLlflHn+ruPmzgpxPaj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1973f0aedcf260f7351cc14bc0ed26a5_JaffaCakes118
Files
-
1973f0aedcf260f7351cc14bc0ed26a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dcJ7r7L1 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rlMlWSPE Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tPhjI3Af Size: 604KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hLtysxeX Size: 155B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u4kdB5V9 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ