Static task
static1
Behavioral task
behavioral1
Sample
246b57d8bb1179700d5b43a7041678f7_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
246b57d8bb1179700d5b43a7041678f7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
246b57d8bb1179700d5b43a7041678f7_JaffaCakes118
-
Size
142KB
-
MD5
246b57d8bb1179700d5b43a7041678f7
-
SHA1
55792d38694025957e33db6abe19d63fc83db0ed
-
SHA256
8ef0a54da0d40ff470d02eb544e53deb420d3852bb63f8629c91b08c55e606c1
-
SHA512
515a9524a7540e90d3384cf935b8e5927cebfcd9bd3bd8673d122e065a5d4ac90744bda70bc63aa1b8ac1e738caa3c541931524d56262f682b40d1747facd2df
-
SSDEEP
3072:W8ZklwCspJyWJfuxzH8GKgTgvki+ya5vOzg2/nwIhVMMESj3HzckL+:VkKC0XfGzcGKgyJa5v32PBVoszl6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 246b57d8bb1179700d5b43a7041678f7_JaffaCakes118
Files
-
246b57d8bb1179700d5b43a7041678f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE