Static task
static1
Behavioral task
behavioral1
Sample
683e1bf9a6d6334c9bf4ee3ffdb87550_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
683e1bf9a6d6334c9bf4ee3ffdb87550_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
683e1bf9a6d6334c9bf4ee3ffdb87550_JaffaCakes118
-
Size
4.4MB
-
MD5
683e1bf9a6d6334c9bf4ee3ffdb87550
-
SHA1
c9e0a82fc2542b5e27f7f05dd3dec169e2f6da75
-
SHA256
7b1eb14f4499a7e85101b284630e352ae4ac7d3a19d63f4d78e885eb0b1a9162
-
SHA512
c3b9d97f4cdea2ee2d2ad96f4a1f7a04d0b10b20e0405d226fd6cfbba651465f4d6ec098091c0855b16a0a6a7685afe058a2ffa428f6d0a24538540a8180282f
-
SSDEEP
98304:UnpWx1LtDDa3tMIOm14eaauMKCW49NuGnkgrODSdRlIPYuzlGz:9PKh1Rq4KGnkgSsqD8z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 683e1bf9a6d6334c9bf4ee3ffdb87550_JaffaCakes118
Files
-
683e1bf9a6d6334c9bf4ee3ffdb87550_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 884KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ