Static task
static1
Behavioral task
behavioral1
Sample
1ad237c394ec52d4060edb82836ad67c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ad237c394ec52d4060edb82836ad67c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1ad237c394ec52d4060edb82836ad67c_JaffaCakes118
-
Size
1.1MB
-
MD5
1ad237c394ec52d4060edb82836ad67c
-
SHA1
6b99baf9cb498e92f39ea181f1ec3dc9cf604b76
-
SHA256
59cc6242dd6a14eca7b2382446a8bd78bd3f78b4abf6f873387b1d0081bfa688
-
SHA512
8baf8cd7b925b06432b2e5705ee269238eb23373e3e2cf9efa5e003d77ab054f5575a8194415c18bd00e7b5db3ceba0930eb4e2ebc0f98f610036c9ba8c54a2f
-
SSDEEP
24576:Ok1g0Ynrh7VS7rrRy5UfjTxnnQc3JLBpQfMP4kmS8X6o:OJ0Ty5UfjTxnnSffO8Xr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ad237c394ec52d4060edb82836ad67c_JaffaCakes118
Files
-
1ad237c394ec52d4060edb82836ad67c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Free Size: - Virtual size: 1.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X64 Size: 966KB - Virtual size: 968KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE