Static task
static1
Behavioral task
behavioral1
Sample
227f2da521021008be338e3a8a3371d8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
227f2da521021008be338e3a8a3371d8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
227f2da521021008be338e3a8a3371d8_JaffaCakes118
-
Size
45KB
-
MD5
227f2da521021008be338e3a8a3371d8
-
SHA1
cd8dcbf3cf5cd6895ee897071f667b4f8bf3f41c
-
SHA256
ac7316a485859e36c188ce462e011dac0da89f7151e494d8396ca407ac3cbaca
-
SHA512
da19c5f24fadde66a2565ad8319fe74b3e00644795e6b71f499f7e41965c8f56d51d7e5f3ef9611bdc6a8f58e2fd5334349c2f7550ab884b582d4abb547aef40
-
SSDEEP
768:zlk2hLz+haITcV7gc6xzElRUwpZKJyNqs6IGxYFhJzlNCLJQRZLV4:zK2Y3S7DplJuyNqsJFDPCLJu74
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 227f2da521021008be338e3a8a3371d8_JaffaCakes118
Files
-
227f2da521021008be338e3a8a3371d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�+f0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�+f1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�+f2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE