Static task
static1
Behavioral task
behavioral1
Sample
258bb113c988423fd6b5af14a99ffee0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
258bb113c988423fd6b5af14a99ffee0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
258bb113c988423fd6b5af14a99ffee0_JaffaCakes118
-
Size
26KB
-
MD5
258bb113c988423fd6b5af14a99ffee0
-
SHA1
ed74343cff8db0cecadac4f5b445e84b3269ee71
-
SHA256
ba3155c2e01a368bc43b24d145b53041450ef53a4e9237717b015143963e9624
-
SHA512
1044312757388403321b4371d980c3e5a160f7af467495f73cd38ada72b61b3a67cf3c336f2921cec458462e5fc6077ce3b303529248de75f87d9e8d428208bb
-
SSDEEP
384:ZcqA2L+tCXDD0xB0EMNmrnmqR5xlrlN1JNQGY26QVz:C/ozDC6EMINR5Dn1JNQGp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258bb113c988423fd6b5af14a99ffee0_JaffaCakes118
Files
-
258bb113c988423fd6b5af14a99ffee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ㅵ I�=� Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�r=di�� Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE