Static task
static1
Behavioral task
behavioral1
Sample
837e51f8b74daf572c5b860d3d90ac92_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
837e51f8b74daf572c5b860d3d90ac92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
837e51f8b74daf572c5b860d3d90ac92_JaffaCakes118
-
Size
214KB
-
MD5
837e51f8b74daf572c5b860d3d90ac92
-
SHA1
9ab468852c90789550aaf47846d1c533be0d4879
-
SHA256
4e663cc3d27162969071ea30c6d4d30ca2bce9c7285897708f33f89237a9cf6b
-
SHA512
f6135981c1e256f62ce5ba27254abd0ee81214949ce1b5e16586bae215dec6bc7cb6ec9b53ce8a4745251ea466d843878bf15a64376db4faa34fd465f372911a
-
SSDEEP
3072:BqNUz1Z5GLfdJgp2pUU6fsiLG4fJM3AkZNbCvl+5Rx+flT00iiTwgd4VJgCwSXxp:BqNdK2CU8TkZNbCeDW+fgd4A8Xjoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 837e51f8b74daf572c5b860d3d90ac92_JaffaCakes118
Files
-
837e51f8b74daf572c5b860d3d90ac92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE