Static task
static1
Behavioral task
behavioral1
Sample
287ca178b26bd1c307cff6bf988a6547_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
287ca178b26bd1c307cff6bf988a6547_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
287ca178b26bd1c307cff6bf988a6547_JaffaCakes118
-
Size
2.2MB
-
MD5
287ca178b26bd1c307cff6bf988a6547
-
SHA1
7877e3b7d000f331fe2ae438703f4cf070b370b6
-
SHA256
7984fc319c8293d4fe727015a79bb66b45e414c3ba13a1c33db12ee6aa016f28
-
SHA512
8c053cf29ac3a8ea6959071190bd340b917428cee71bf3240c3a0415ed6057fa8644c0ecc3f3443772f06e59891f3d0d56ea5619272d0ff5dea47d6c1ff76a00
-
SSDEEP
24576:Rp6AJ/DGbINxo88Ttd7Ow5Vz8GLN+FRpCPWOWoKrGutBmEdNWtWVVJ8QLLhHKzEl:T6iZWBd7Omz9n9WjdN5/8QLdqz2Dzpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287ca178b26bd1c307cff6bf988a6547_JaffaCakes118
Files
-
287ca178b26bd1c307cff6bf988a6547_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 637KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE