Static task
static1
Behavioral task
behavioral1
Sample
212f4fbd9f90e7517f64bd55f0aee268_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
212f4fbd9f90e7517f64bd55f0aee268_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
212f4fbd9f90e7517f64bd55f0aee268_JaffaCakes118
-
Size
24KB
-
MD5
212f4fbd9f90e7517f64bd55f0aee268
-
SHA1
9220125d3f83714dbb46cb8d8832dbdac14d6d41
-
SHA256
6b1a768321d9311066e1dfb8828144b996eed69defa85d68079d3a3254722395
-
SHA512
70d3818f81b111937aa9a7af8890bd4c936ab0cc274553e3e498570ac63c8ef368fa3e2c343abd63dc306395f565fd07177ed5307ca27edb915ce7aac30b8226
-
SSDEEP
384:mgW/WoVXaGOuJvv2ptnSbADepPhY2mD9zjtRFwIQMJE2A4ysCwSynBzb5VXXMMgE:Ua6vvMsbyeHYzD9ftGdB4y9GJLM+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 212f4fbd9f90e7517f64bd55f0aee268_JaffaCakes118
Files
-
212f4fbd9f90e7517f64bd55f0aee268_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
7Q: 0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7Q: 1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7Q: 2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE