Static task
static1
Behavioral task
behavioral1
Sample
267404184b7463394810b8d360010b35_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
267404184b7463394810b8d360010b35_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
267404184b7463394810b8d360010b35_JaffaCakes118
-
Size
1.5MB
-
MD5
267404184b7463394810b8d360010b35
-
SHA1
4c88ca55a7017da4cee3c307b39085ce37d991c5
-
SHA256
afe5416273ad1ebae4524bbc643703fa70b5d018ee40362b4ee3fe4d90ac856d
-
SHA512
86311e14368555cdc0a25ab37a2170df90461cf59424412fff0f648b0704b8c2ed1daebc04c99509ee1eefd29aaa91a0ec8091f0ec37e4ced9c3bb4d9af66594
-
SSDEEP
24576:MrE9ordVHRdhjjOKDhz+UmD6Vr51o+srnI2oRpUHBIER+NaN76X1E18c7M1aeLbZ:MrE9ord95OuiUmoHFsTIJrlERyY76X13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267404184b7463394810b8d360010b35_JaffaCakes118
Files
-
267404184b7463394810b8d360010b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 690KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE