Static task
static1
Behavioral task
behavioral1
Sample
287c37c81f67bd0151b6d130e3b22e46_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
287c37c81f67bd0151b6d130e3b22e46_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
287c37c81f67bd0151b6d130e3b22e46_JaffaCakes118
-
Size
366KB
-
MD5
287c37c81f67bd0151b6d130e3b22e46
-
SHA1
a5f318e77c442f201b2730db9169d98feec624db
-
SHA256
ea0f8bc4f7485865557b9c3dc6524273b519ae87fbfb2e2fbbd9d9a7dfe35bf7
-
SHA512
e8b43efbc0598c45dd4c842e0dfb2b3efd2c5f3dc48b25ed968fe8c3fce9e5a12f0723fdb2454dc9f678715a14a43991cb0719dd130fbd3ab32d1b5f0f244ce1
-
SSDEEP
6144:e/yGD+1upcBLQW89kr9hShYq2qIwDBuZ5WN0VJtPlx/gGOuzlenAAkX6N8aj:e/yGkWcpbsHUqnDBuZ5WWJ/xFOUlcnBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287c37c81f67bd0151b6d130e3b22e46_JaffaCakes118
Files
-
287c37c81f67bd0151b6d130e3b22e46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE