Static task
static1
Behavioral task
behavioral1
Sample
832acbccd4915636df64a982600f163d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
832acbccd4915636df64a982600f163d_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
832acbccd4915636df64a982600f163d_JaffaCakes118
-
Size
88KB
-
MD5
832acbccd4915636df64a982600f163d
-
SHA1
751e99e594b312c1b736c4e0c1ee19b144531498
-
SHA256
384a1193e77a811ca0455f5a4e51f6f7f5c1cc552b5e8701216d35131a834be7
-
SHA512
d92c045f2381d484a7b7a2c88be75d34646d07ed4a0399d79d8f4e98c015e2baed81dc5de3a72d4218c305d3c93cf4b6a1fd2b0cc4960826864206df2b18bf93
-
SSDEEP
1536:jXFATuBZTIhCxRYV15AT+iwgJkBeaeptlgz67eJcw2lZw/0815c:jVAqbMARYW7+ItgzKeStO0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 832acbccd4915636df64a982600f163d_JaffaCakes118
Files
-
832acbccd4915636df64a982600f163d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fcawul2 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aamu Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE