Static task
static1
Behavioral task
behavioral1
Sample
284049f04a6ec121b34d685e2085225e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
284049f04a6ec121b34d685e2085225e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
284049f04a6ec121b34d685e2085225e_JaffaCakes118
-
Size
461KB
-
MD5
284049f04a6ec121b34d685e2085225e
-
SHA1
b20b3a86e91dac9ba9d82fbf6fa4abb64fff416a
-
SHA256
7c08d903630f16c9bec21229f93c91a65137c8ad156cd2336fa2ff9e00ee3e0e
-
SHA512
0f3ddd75f06b8f3e3d24d143a0164f54178e0883e14397b2f03f46f708bb0143204a049ddadcf8df31a7260e6355190f9b86d10426b82a63486dff8f9d73f030
-
SSDEEP
6144:8lylHH2AZG2eA4hlNtPHYfAWixRtw1SZ7n+aCP0vdZhhL0MTiFlkkUo6:JH2AK37NFYmn3WPCZHBivHUo6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 284049f04a6ec121b34d685e2085225e_JaffaCakes118
Files
-
284049f04a6ec121b34d685e2085225e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 97KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jhgfgdf Size: 184KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE