Static task
static1
Behavioral task
behavioral1
Sample
451c68571328ae3b4e0990bb996ea4f0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
451c68571328ae3b4e0990bb996ea4f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
451c68571328ae3b4e0990bb996ea4f0_JaffaCakes118
-
Size
554KB
-
MD5
451c68571328ae3b4e0990bb996ea4f0
-
SHA1
282a9093befbcffb88bbe7a75db0e43a8f279edb
-
SHA256
7ed8a4f8ce6b579795672017f48a9240dff84f55ee236f21e0f40c0067d30e8d
-
SHA512
e8244b8e5848859ddda5231f01d9e4a785b3e5a7c699e6db422a9e1f43639de96d0b9b77f812956112d9e13a24de1cf54d738bd65b8326cf623a2abd8e9ea5ba
-
SSDEEP
12288:I0JQrnw2oY2ow79zOWavjseQIZfJVG/W60eHLoeShKgoP30:BRFos9WjsefzgceZSho3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 451c68571328ae3b4e0990bb996ea4f0_JaffaCakes118
Files
-
451c68571328ae3b4e0990bb996ea4f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NjYr Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NjYr Size: 545KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE