Static task
static1
Behavioral task
behavioral1
Sample
675c46a6e54f348032e5835ae4f828c8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
675c46a6e54f348032e5835ae4f828c8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
675c46a6e54f348032e5835ae4f828c8_JaffaCakes118
-
Size
212KB
-
MD5
675c46a6e54f348032e5835ae4f828c8
-
SHA1
0d124ef2d043336497ca3a773cc236fcf7d8f975
-
SHA256
04e2fbdfe816fe05d3b0bdde1924c99f844ac899f3b1cce48b11ffaaed419cf6
-
SHA512
df2f3bed4ec6421676e0aee48d5b4824cd082f0f124dcb658783508d5db955ed60088432b801acb5c74e083ad6e4f1d9590149564c0d52b1b01d9e5f43e31f56
-
SSDEEP
6144:zJHUbhbUiRN7pOo2cKBcSKT5lDMJJkvEh7:2hRNdOo2FC9pMJu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675c46a6e54f348032e5835ae4f828c8_JaffaCakes118
Files
-
675c46a6e54f348032e5835ae4f828c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
IpITSsdX Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wT7Ph Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4f Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE