Static task
static1
Behavioral task
behavioral1
Sample
1be44c31b7c6683caed0c49a03cc39e8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1be44c31b7c6683caed0c49a03cc39e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1be44c31b7c6683caed0c49a03cc39e8_JaffaCakes118
-
Size
8KB
-
MD5
1be44c31b7c6683caed0c49a03cc39e8
-
SHA1
7341a3b39ecc7bc3935ff44824a6611e187ae2a7
-
SHA256
3a3d7644428b0a7188718709e4f3b470b9f96660d3159bbf625456f229380796
-
SHA512
c6310da2a6a5acbaf9ebf5016562ff6716828bdb6f50891dea841b91624088922aa4b8cd1d749676a7a9d5bde6acfa88408813b89c530c0d36f24806fd8685e2
-
SSDEEP
192:b0pmZmHzYDGabH0nau5GhWJhZGA1YHMlRoO:bam2WGoEayGYh19lRh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be44c31b7c6683caed0c49a03cc39e8_JaffaCakes118
Files
-
1be44c31b7c6683caed0c49a03cc39e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE