Static task
static1
Behavioral task
behavioral1
Sample
1ad1d88a46f79e476fc676319c17dbb1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ad1d88a46f79e476fc676319c17dbb1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1ad1d88a46f79e476fc676319c17dbb1_JaffaCakes118
-
Size
76KB
-
MD5
1ad1d88a46f79e476fc676319c17dbb1
-
SHA1
6f898d2e16e0038d4a915bae15c05b8c02cddc07
-
SHA256
42aa28fa4034ffac7b17969ebc6b61a8f08b905588f01447accfb34ccd72ae58
-
SHA512
82fa5083881cc0a483db7c5549ef0797c70299422da94bc391b16b3a63268bc2aa7d6bd7e4a215d461148d36126fbb733f225c633a705643c699ccad83503fea
-
SSDEEP
1536:ZjesTfKGiZBwN9UefpgHmEPkdQBil0/a:wsjwwvfpymESQE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ad1d88a46f79e476fc676319c17dbb1_JaffaCakes118
Files
-
1ad1d88a46f79e476fc676319c17dbb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE