Static task
static1
Behavioral task
behavioral1
Sample
1afb3c2ea894d3802db293ea88eb5027_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1afb3c2ea894d3802db293ea88eb5027_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1afb3c2ea894d3802db293ea88eb5027_JaffaCakes118
-
Size
1.4MB
-
MD5
1afb3c2ea894d3802db293ea88eb5027
-
SHA1
4b8297c7ef01893f8f59c78c5afdac1bdccb0288
-
SHA256
c554c35f56422ddad890cbebad8361d3a0d4537881a945878cbe24852bbc2a35
-
SHA512
0271f8b36ade27489a55428544b7f1a9e06e5af4c730adb0c9820110a3e96f39f97142bb9750c3ea275f2acdba40e3f92574762e745da5b619787183c7358dbf
-
SSDEEP
24576:RJNIsPx4HnHx6RgKs5a90GzkQcc7dnqVlONl9+dP2d+42W5VPILN:R4o8qGqzkw1q0XNdUWU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1afb3c2ea894d3802db293ea88eb5027_JaffaCakes118
Files
-
1afb3c2ea894d3802db293ea88eb5027_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
4j0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fj41 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE