Static task
static1
Behavioral task
behavioral1
Sample
297058f8ccabe3e9c91d92f916018782_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
297058f8ccabe3e9c91d92f916018782_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
297058f8ccabe3e9c91d92f916018782_JaffaCakes118
-
Size
2.2MB
-
MD5
297058f8ccabe3e9c91d92f916018782
-
SHA1
9f34033ab39133e27fa3784c709fc6a9d94f10d6
-
SHA256
90803883d996b22ca4723f5f48327902d8e3c442b3cfb428f2b986ae112ccb6a
-
SHA512
019d1f31f460442bab3ce74941ccb1cdf58d117a77651df6fe3197a9b8ed14bcfc2d2dbd652bb3a65bf864dd3b748546d161cec36337cfc065f641e1b9289849
-
SSDEEP
49152:qDKJVY8CXVbEpHv7tYtgN/g3u8Y8l6Eo9Tcs4oXNu:SK+cHatHux7pTcs4aNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 297058f8ccabe3e9c91d92f916018782_JaffaCakes118
Files
-
297058f8ccabe3e9c91d92f916018782_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb78d50c0413dbaf01ff2c2802bd5e88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 winmm
GetNextDlgTabItem ��*
Sections
.text Size: 1.3MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ