Static task
static1
Behavioral task
behavioral1
Sample
83635d9091fccebb7510fca50565128c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83635d9091fccebb7510fca50565128c_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
83635d9091fccebb7510fca50565128c_JaffaCakes118
-
Size
149KB
-
MD5
83635d9091fccebb7510fca50565128c
-
SHA1
f4af1692ed6192e5a039ea1e6258f926f8aaa2bf
-
SHA256
e4ac60f41d8cf94d33e0b9c45a53a13501852d59b7c08c4bfc5d05db449eed38
-
SHA512
4ac99acc0f5318654ae4a92c31119eaf18ca9bd74123660f9e4abfffd155778d954887457b3c663fd13107d42c06183bf00a6ddf9480e790418d65363d84b932
-
SSDEEP
3072:Jz4MrD94M63kxtDPJjaGWJoNHF/jsLPLYRPwRMAYgA:JD9563A5Rqo7LIPLYJMNYH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83635d9091fccebb7510fca50565128c_JaffaCakes118
Files
-
83635d9091fccebb7510fca50565128c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.cx26c7 Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3.0MB
.rbss Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.engine Size: 122KB - Virtual size: 124KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE