Static task
static1
Behavioral task
behavioral1
Sample
267c71135783a0c4a135b20c185a7338_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
267c71135783a0c4a135b20c185a7338_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
267c71135783a0c4a135b20c185a7338_JaffaCakes118
-
Size
368KB
-
MD5
267c71135783a0c4a135b20c185a7338
-
SHA1
fd732a6c44324a463dd1451fd8499ef280047859
-
SHA256
162ff8ca89ebf91270cc842c3e5f47c3585b0b11427d9067a1d1b313de1de9c4
-
SHA512
a9a383026f67d6c682fb7da2fe8643ed23468e167b8ef2c96adfcc950a3935d6f8f67d397fbd285520c8c76157a1abd0b1f60774e1ad2e68fd8ff11de7b63ed2
-
SSDEEP
6144:pRyH79s4/ZH2aU2zHmvu58TuppfkDX/XL+io4RX698aocxlkyhiyfwfzoS:zW79s4/ZNzHmvu58ipR2b+yRA8yNfwrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267c71135783a0c4a135b20c185a7338_JaffaCakes118
Files
-
267c71135783a0c4a135b20c185a7338_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 362KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE