Static task
static1
Behavioral task
behavioral1
Sample
385ca7b259379d9ac1c480c10575cdc5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
385ca7b259379d9ac1c480c10575cdc5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
385ca7b259379d9ac1c480c10575cdc5_JaffaCakes118
-
Size
856KB
-
MD5
385ca7b259379d9ac1c480c10575cdc5
-
SHA1
452dc866288afb68d6a095ffc54982c59e53e596
-
SHA256
47861ad5142bea92239d9f2fd9fe0f40fb10f95e765b92af13917d090a66122d
-
SHA512
92f2b9ab663983a2acbbb1f9c5af0169a0bcd3d8772e0f60ad7c16d523c591e6355cfc7638d272489007fe34b926d2e34829e7c734a467e9561a57d9a558d8d4
-
SSDEEP
12288:NCfhFSV/W5ZBNaHGm9GEvI8cJnmUJlHyqLDsq42U0VERqzVN1Ml4RiTGURq7nmF:wzY/W74GmbK0UJlSqLbHLVER+LQLJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385ca7b259379d9ac1c480c10575cdc5_JaffaCakes118
Files
-
385ca7b259379d9ac1c480c10575cdc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
YMY Size: 440KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YMY.LDR Size: 415KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE