Static task
static1
Behavioral task
behavioral1
Sample
1c301951f43ba544d74cf2e1b6f84280_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c301951f43ba544d74cf2e1b6f84280_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c301951f43ba544d74cf2e1b6f84280_JaffaCakes118
-
Size
89KB
-
MD5
1c301951f43ba544d74cf2e1b6f84280
-
SHA1
077eb21d80f85d5c87730f564559e54928c8fba4
-
SHA256
cb495267781a74c38935754125ac3a2e86b5d5010943b677fd0182eafdc2a790
-
SHA512
f3db4b9958b01aae0bde57d96903988f40761aa56587436efe412428d141b61787fe96e3420430a5e8f367d06f71753e1c201ba81d8bc5763ef491604ac25476
-
SSDEEP
1536:u0yaf8wNvmOIMbL/nlHWWHn1fyUrsmjdMK44UxiwFuRi6Evo5AjVM:bf8wNOO5/1HoUYmxF44UkbZEvoA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c301951f43ba544d74cf2e1b6f84280_JaffaCakes118
Files
-
1c301951f43ba544d74cf2e1b6f84280_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 80KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebut Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE