Static task
static1
Behavioral task
behavioral1
Sample
392f779d69ce4e68a5c0ddff4f4467a0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
392f779d69ce4e68a5c0ddff4f4467a0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
392f779d69ce4e68a5c0ddff4f4467a0_JaffaCakes118
-
Size
1KB
-
MD5
392f779d69ce4e68a5c0ddff4f4467a0
-
SHA1
908a1f162968e17e743e28be46a79b4415dfeac8
-
SHA256
c379e9fac4cf53f8bc5d09d79a651c41115bbff2eecd4faf8d01113637849da8
-
SHA512
d98160c132e7f8f892cd96764fcfc8710718a069334634f3f014e89ac4bcb287202a8f229d82dd57ec92a41da975c05fc9807f43e4608656661588060bd6dde2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 392f779d69ce4e68a5c0ddff4f4467a0_JaffaCakes118
Files
-
392f779d69ce4e68a5c0ddff4f4467a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE