Static task
static1
Behavioral task
behavioral1
Sample
2485424eecb7ed5d4d72c586d7182795_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2485424eecb7ed5d4d72c586d7182795_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2485424eecb7ed5d4d72c586d7182795_JaffaCakes118
-
Size
50KB
-
MD5
2485424eecb7ed5d4d72c586d7182795
-
SHA1
5b1c8841660674b73dfb3827db701ad8530a20f7
-
SHA256
5ad6d37d6bea33b225e76b6c86688e18668066f9e2ecc4fe8406b7634c9d728e
-
SHA512
98cc3d1aeac8e420427a18499dd76c97f05c89e926c0743f81d74f75557fb1127e8b8ac3c856913e2f4b99f7ec65cc86484cd28ec0cdb4a8c30ae1cb0fd1425b
-
SSDEEP
768:O9N2U+3U+jyceF5w66spq6i4k9FxFELovO7Q4m0pJn8M5X5QaLPHEpFF61/dgF4J:O2/U5lbQ99F5O7Tm+J8IX5TEpgTRdN3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2485424eecb7ed5d4d72c586d7182795_JaffaCakes118
Files
-
2485424eecb7ed5d4d72c586d7182795_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 139KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE