Static task
static1
Behavioral task
behavioral1
Sample
1ba92ea06b53f2922d47ade85f0c1808_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ba92ea06b53f2922d47ade85f0c1808_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1ba92ea06b53f2922d47ade85f0c1808_JaffaCakes118
-
Size
292KB
-
MD5
1ba92ea06b53f2922d47ade85f0c1808
-
SHA1
6b6ea1894bcb8198a7b3eafc659e9005c04eb36f
-
SHA256
d83db61322ffbea31cab0b1d612d3631e99b98feb1434cee767d6261997d0d36
-
SHA512
ba5cf49483d08d5fcd8800bcb43c3056000fbe66657ae9d98e4e4ec51d7dfac938272d000146bf1eeda60f7e0d3fff74f16c4083317bb0496a5b56f15fa291c8
-
SSDEEP
6144:TWV8r8IFqNhc23rLD1cAA25JtURpwi03gI/qBisAl:pQ02bLD1cl25JtUu/qBiNl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba92ea06b53f2922d47ade85f0c1808_JaffaCakes118
Files
-
1ba92ea06b53f2922d47ade85f0c1808_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��� Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE