Static task
static1
Behavioral task
behavioral1
Sample
7011120ec8b8aa2f9b630070e41c0622_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7011120ec8b8aa2f9b630070e41c0622_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7011120ec8b8aa2f9b630070e41c0622_JaffaCakes118
-
Size
476KB
-
MD5
7011120ec8b8aa2f9b630070e41c0622
-
SHA1
0bb25a178868d664efc23879195aa1e0c26273c4
-
SHA256
be9ba43611b687338de82f276a5b0b0778f471fe7f0183e18913e17b4a5e9d26
-
SHA512
bf71d23b4829a7bb4978c6a0484e2e4f3ec2256c2751ca396fdd6f1de6f8e5358f6e9eb026512c9a6dd037f68fde7e0441d9312a9ee9d2e31e8a202bd91d2a3e
-
SSDEEP
12288:QaA1d9moKN1/ZApEZPWjC8tCsfYqFOqNB:gU1BApEZ+jC8tCsfYqYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7011120ec8b8aa2f9b630070e41c0622_JaffaCakes118
Files
-
7011120ec8b8aa2f9b630070e41c0622_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.DEMO Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.legion Size: 4KB - Virtual size: 4KB