Static task
static1
Behavioral task
behavioral1
Sample
68792133d24e6534e5f860f4a5598477_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68792133d24e6534e5f860f4a5598477_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68792133d24e6534e5f860f4a5598477_JaffaCakes118
-
Size
76KB
-
MD5
68792133d24e6534e5f860f4a5598477
-
SHA1
29efc1fab39d73801f23106a577179efe8852da8
-
SHA256
2439f5d45cacaa14ed2ab2b6bc7acf2adac549d0c6247a727517db221bf91d60
-
SHA512
281321cc90f2bc2c0011286803856b14f3d894c19279972a864fe84c7e0e5e0f5816a2fd7bb1bb1fd457b166e6645bd9ffb3b14c61a295738a65d2b0e6deecf2
-
SSDEEP
1536:PUWP0Ck12iG59HaHUHXXraAJT4tTx9Xcs6raSUTvmf:PUtCk12iG/oUHX7HATvcszAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68792133d24e6534e5f860f4a5598477_JaffaCakes118
Files
-
68792133d24e6534e5f860f4a5598477_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 423B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ximera Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE