Static task
static1
Behavioral task
behavioral1
Sample
1a9fb29c7bac372360d1f090ba0d2f1b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a9fb29c7bac372360d1f090ba0d2f1b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a9fb29c7bac372360d1f090ba0d2f1b_JaffaCakes118
-
Size
736KB
-
MD5
1a9fb29c7bac372360d1f090ba0d2f1b
-
SHA1
1119b7aa607b0d115da7853086e90fb7074e880c
-
SHA256
85bacfc1c23b52af39e58cb82b3bf5dde1b605355149b0eb715413741eafbd52
-
SHA512
fd5fd0955dadc9ed24b50076c70e807251580aeeb9c447e85e54aa94df897462252c2cff9e4ce10456b14f64a39b137c0b7db7b42e2bbb25c956b4de57a40b41
-
SSDEEP
6144:IQ3laCt+FI+294iQBDeEiOH02dhJK9390c769/cF:IQ1aEc2945BDKOhdLK8c769kF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a9fb29c7bac372360d1f090ba0d2f1b_JaffaCakes118
Files
-
1a9fb29c7bac372360d1f090ba0d2f1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE