Static task
static1
Behavioral task
behavioral1
Sample
6988ae538a850cd85c1e3a11611add04_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6988ae538a850cd85c1e3a11611add04_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6988ae538a850cd85c1e3a11611add04_JaffaCakes118
-
Size
41KB
-
MD5
6988ae538a850cd85c1e3a11611add04
-
SHA1
43b0bff72bf182a0d4b090c1e18e61c86ea30782
-
SHA256
33e079dc450128b6fd8382d6bba42355c042f80a1cd4f51ce9483f97cda423a8
-
SHA512
f45c01c2a51a8acb5f7f5c9c5bba836d84cb2aa98e8fab3adaa289275a6d4ee29ab5f944d69f47c77b7bc9be4ef4e2c1c87de076268164062b83b084269c8c4e
-
SSDEEP
768:pTKjLeDgcyFkJ7zNOe2AMy30gxXjaTVEl2vXqWBLBNNPibjkIlYN/:pTKj5cikeyf+iWXqW70K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6988ae538a850cd85c1e3a11611add04_JaffaCakes118
Files
-
6988ae538a850cd85c1e3a11611add04_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
X-yh0;If Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
On=(7pYI Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
"ZAM#,tI Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
(]kjgYcl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7)r%vsHx Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,h"I;HK? Size: 405B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
&!sVBQS> Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Jl'Xk0-Y Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ