Static task
static1
Behavioral task
behavioral1
Sample
1c199237370c8f76b3c866c33c020ba9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c199237370c8f76b3c866c33c020ba9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c199237370c8f76b3c866c33c020ba9_JaffaCakes118
-
Size
55KB
-
MD5
1c199237370c8f76b3c866c33c020ba9
-
SHA1
1e85b8b3d05c53cfdfa1a4fa37e30063481871ed
-
SHA256
a6b0b5ef24d34e7ae8662d67576c2933497c49406c3f073a237a5ea5d6b16e1e
-
SHA512
e46bf805914abc21f6c8eb881365c4743885116006e21de7101f0df47275e717c11187e0ccfff14db4373a914be8e53341398d9ae3b80f38f95f5260083fa074
-
SSDEEP
1536:NU6JhlQvW4R8ZDW2OsdCj7VhJ/YY5rInouy8r:NRhlARSOsdwD/98out
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c199237370c8f76b3c866c33c020ba9_JaffaCakes118
Files
-
1c199237370c8f76b3c866c33c020ba9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE