Static task
static1
Behavioral task
behavioral1
Sample
1c635515807c1df7321f4ede89f8344c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c635515807c1df7321f4ede89f8344c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c635515807c1df7321f4ede89f8344c_JaffaCakes118
-
Size
27KB
-
MD5
1c635515807c1df7321f4ede89f8344c
-
SHA1
fa22614b74ed49f7d52c4fa9b5070b1202972848
-
SHA256
256ad9f275c1ee2c945b5eb26cb0774875823a2acfc104bec71cb95d68108d13
-
SHA512
19b7fbb8505ba29f18efb3bc1ed9a1cc3e3096be41c3b2fddda02cd732405601b97d195702ee2f0ec32d72f6e30f17bc3f42d05c3558ad9ab35355ccad517266
-
SSDEEP
768:RW/ISB5KFygXqIliIWIjlLs89+jl7DKkChXeP0:RiISB5shFM+jlv4VDKDo0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c635515807c1df7321f4ede89f8344c_JaffaCakes118
Files
-
1c635515807c1df7321f4ede89f8344c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
do7q0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
do7q1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
do7q2 Size: 299B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE