Static task
static1
Behavioral task
behavioral1
Sample
3154828f832c7c39f775a17d5960f9eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3154828f832c7c39f775a17d5960f9eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3154828f832c7c39f775a17d5960f9eb_JaffaCakes118
-
Size
29KB
-
MD5
3154828f832c7c39f775a17d5960f9eb
-
SHA1
ead59c85271df6e3c856673f8d01bc7aa0fc0b23
-
SHA256
2e9aaf8766a7e8bbda6cf47f9e5a99305803c9abae59d3c9fb2985933075bf5c
-
SHA512
e238ca086de155eb8717a75d84fbd71e5700182ec58a2a3a4c0cd21b704b3c8219bbe772b64c61729da04352252ea5533ae97c2a24ef14c59d2b6814f063ae21
-
SSDEEP
768:ar9e8mYBX0ebcpPgfZZGBsTr6SQ4i6rudUl5Dpx5EjXJkV2f:aY8mwTbcp4fnGBsTr6SQ4PruUTpAVBf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3154828f832c7c39f775a17d5960f9eb_JaffaCakes118
Files
-
3154828f832c7c39f775a17d5960f9eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
94qskitv Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hz0ak8qn Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE