Static task
static1
Behavioral task
behavioral1
Sample
2658896120e1e725f2f2d68741ef459d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2658896120e1e725f2f2d68741ef459d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2658896120e1e725f2f2d68741ef459d_JaffaCakes118
-
Size
106KB
-
MD5
2658896120e1e725f2f2d68741ef459d
-
SHA1
9ef4bef371b5a4f1739329c26c032c86df2b5cfc
-
SHA256
0b6599908cf48b27da338830047b59684f2c0c66152604b98f59519e9d6111ca
-
SHA512
dffcd88aa32a89faff12a96d3c109e8e1bdc9806d080777d7b8a78f69219635ee425c37c82478e06e6216f86f637208517d1f4014b7ce9d2ca13037d0f8e6f71
-
SSDEEP
1536:beqGAppKOR24YhOi9WWwE1SFsjo9E5Mpu9twIyjQSCDUZvJ6CJxUv:aPAft73eosaEqu4jQS0UBKv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2658896120e1e725f2f2d68741ef459d_JaffaCakes118
Files
-
2658896120e1e725f2f2d68741ef459d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 856B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE