Static task
static1
Behavioral task
behavioral1
Sample
2249e246785b066c410dfd663b5e2204_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2249e246785b066c410dfd663b5e2204_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2249e246785b066c410dfd663b5e2204_JaffaCakes118
-
Size
50KB
-
MD5
2249e246785b066c410dfd663b5e2204
-
SHA1
9d652bf59b245ed59bbc4f2882d6616d4e0e543d
-
SHA256
9025064f817ce1e7e0c2ec7bc158a25dc90a1990a35b1cae9d0e5fdc4bf6917b
-
SHA512
ff9f5a5ea412a81bfbdc3b18e4089afcbb61dd15e2c77aff4cc7b87b9c4ec35a1fd7ae003c5d46457af6ebab354fc358c8a476626dfc986df1aaecf55df91764
-
SSDEEP
768:nMXkE7U60L5jTgc/iPQc0Ic+a+GlKyHu0y3u02qU6E4/IJe/nbcuyD7UIu:nMUYU6U5jUdPQc+n35KZg8/nouy8Iu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2249e246785b066c410dfd663b5e2204_JaffaCakes118
Files
-
2249e246785b066c410dfd663b5e2204_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE