Static task
static1
Behavioral task
behavioral1
Sample
1c6fd9eb8f0aca7776ca3c91f9bb3b1f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c6fd9eb8f0aca7776ca3c91f9bb3b1f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c6fd9eb8f0aca7776ca3c91f9bb3b1f_JaffaCakes118
-
Size
1.8MB
-
MD5
1c6fd9eb8f0aca7776ca3c91f9bb3b1f
-
SHA1
cf04d9e4e170c55555568fac9b1c661204634feb
-
SHA256
25b99b8a5377c85b11917cbf1828b12e271e5852a65dbf44aa1bbde16ced0d43
-
SHA512
cea2c583a398a2bdfedc96af18d9742171111bc925639a87a8eaea083012a20baa7acddb5402353d67031748c10973350c1bc2a2cb2aebc378e905b467446c3a
-
SSDEEP
24576:kfvPzCGPnRdx3WrbLsNNNfeZ9662yL8kG+jD04PY3zAduAN6ZADIIlQUY3tUP/eD:KLCGZdx38sN02jkGA0zE0ANflZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6fd9eb8f0aca7776ca3c91f9bb3b1f_JaffaCakes118
Files
-
1c6fd9eb8f0aca7776ca3c91f9bb3b1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lucus Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE