Static task
static1
Behavioral task
behavioral1
Sample
1c7e7cda3c0fb67da9ebbac82a9d8892_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c7e7cda3c0fb67da9ebbac82a9d8892_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c7e7cda3c0fb67da9ebbac82a9d8892_JaffaCakes118
-
Size
278KB
-
MD5
1c7e7cda3c0fb67da9ebbac82a9d8892
-
SHA1
48632189d6c58776119202645682975a5beea475
-
SHA256
0864f64828b6d4d7e5aba207f63ee87afbe869512038aea639d3f59b44c34041
-
SHA512
c7301b27e65e1c622f08d7116c04611ae28d6afe9418c2659dbbd60d20c1fcb9ab43b0c6bef1a0c44cdd9416737beca86715b92c5f2a6237ea81813617bdbb61
-
SSDEEP
6144:w+YGkZf8MgI6imgfX3ue1tQ5s8CCTsZH54u+:AvE1gfHHY5s84V5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c7e7cda3c0fb67da9ebbac82a9d8892_JaffaCakes118
Files
-
1c7e7cda3c0fb67da9ebbac82a9d8892_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE