Static task
static1
Behavioral task
behavioral1
Sample
4153a07347b3bdf74b527e51cc63a843_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4153a07347b3bdf74b527e51cc63a843_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4153a07347b3bdf74b527e51cc63a843_JaffaCakes118
-
Size
176KB
-
MD5
4153a07347b3bdf74b527e51cc63a843
-
SHA1
561d41f02be885b86c4a182f5ad669656de535d3
-
SHA256
3c924b712a0eee5e090675bd0a35493c4c3791c30e8ebad7b5f6ba344d338e39
-
SHA512
f881dd5fa44172101cc0b93a318a93fcc20d334c6e204fd2fbcc580ea7e875a1698e494c7e1e7a2f50b2dead1c645d6ba18f3362c1e4816ed2af92781130deb0
-
SSDEEP
3072:CDR5QPt5xRrJLQVcjKZMiriscff+fOyhGahBLaA3caVqEYMFA/FhAcNoeuz:CDR5QPtFhQVs1LfithRanSq/Bh2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4153a07347b3bdf74b527e51cc63a843_JaffaCakes118
Files
-
4153a07347b3bdf74b527e51cc63a843_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.qxaxub Size: 35KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ryn Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.atwtcf Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ