Static task
static1
Behavioral task
behavioral1
Sample
2249581c0014bf8e3b2ad9f06d0a0b1c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2249581c0014bf8e3b2ad9f06d0a0b1c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2249581c0014bf8e3b2ad9f06d0a0b1c_JaffaCakes118
-
Size
797KB
-
MD5
2249581c0014bf8e3b2ad9f06d0a0b1c
-
SHA1
db81747b3a4279f77de49ebf0bd18d7f00c71794
-
SHA256
a698d07a380775d2237f1f379afc50f56bc1091fc5cc2404bffb6337a70ebdcb
-
SHA512
405d210f1d6a56ad4ebd7ef86322546c551e2d2edd14aaf95301543dac0cd27e6bd581a402ed72bcaca8ac34f1f4046a3f1e70854f4ded266bdcf4a718fefa12
-
SSDEEP
24576:d+W/1mo88Z9V9oaP9/s7akXy5zFobt+VzgWMtgbu:d+s1h88Z9Ddy7aG3bqdNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2249581c0014bf8e3b2ad9f06d0a0b1c_JaffaCakes118
Files
-
2249581c0014bf8e3b2ad9f06d0a0b1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
R%d Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R%d Size: 795KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R%d Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE