Static task
static1
Behavioral task
behavioral1
Sample
219382972e0d5419bbb985b2fda0b399_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
219382972e0d5419bbb985b2fda0b399_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
219382972e0d5419bbb985b2fda0b399_JaffaCakes118
-
Size
66KB
-
MD5
219382972e0d5419bbb985b2fda0b399
-
SHA1
6887852119dc9c26b034035f30f6e05a0a347d1a
-
SHA256
730475618e870fe876f660216ace8196b23ca6e0c00d084f733ee9bd4c53c3e3
-
SHA512
256bbe75df46820d8501ba8cde1b2ec0ea18a42a1551bd809ea3f31ba71209e2868d22580f725f5ee3e84f1e48a896b0e6bc4310b02068ab08ddd0f7dd00cc31
-
SSDEEP
1536:BpJKJfAghSws8TAtmzVttb3cY8W1GbM1uVxPNE7r3UdrAhtGq:3if9C2xj3t8bMAE7IdsH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219382972e0d5419bbb985b2fda0b399_JaffaCakes118
Files
-
219382972e0d5419bbb985b2fda0b399_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 547B - Virtual size: 943B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE