Static task
static1
Behavioral task
behavioral1
Sample
266301506e574ce6bd2850a7ccc33167_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
266301506e574ce6bd2850a7ccc33167_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
266301506e574ce6bd2850a7ccc33167_JaffaCakes118
-
Size
92KB
-
MD5
266301506e574ce6bd2850a7ccc33167
-
SHA1
1f713f2c2a688391c032394b0e86f473a1d895ea
-
SHA256
951e58ae38f7099708ca8c0c5ff406b2cf56c66f8e01f557e32844b3e19684fb
-
SHA512
185880a8aeb834323b65e27ec56c3281d8a9f82722f37895671018cea60d7052aac9b2b88531701319d091173b5f10dd64b7adfd5ae0a529cdbae063d80edbd1
-
SSDEEP
1536:KfgacJBoQGfD6qORAxi9I82uzE0eqjVK+pp/WTPcExgwDf75EOFwNJy5JCK:Fa53D6FRjI1nqjkkW7ZOwT9MY5JCK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266301506e574ce6bd2850a7ccc33167_JaffaCakes118
Files
-
266301506e574ce6bd2850a7ccc33167_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 168KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zcpjeyti Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ssmmiktk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE