Static task
static1
Behavioral task
behavioral1
Sample
856078847a14126b1c9fdda15e20a70f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
856078847a14126b1c9fdda15e20a70f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
856078847a14126b1c9fdda15e20a70f_JaffaCakes118
-
Size
202KB
-
MD5
856078847a14126b1c9fdda15e20a70f
-
SHA1
babcc2d286df021f47525d31fe9d1d36ae65180f
-
SHA256
f4eab12d2ce39138999b4c43b06c87857a721a1a52ec9102e7c97b7cb3d70781
-
SHA512
ebfd81bb743d45303cb51caf53c33b3ccf1457f57942ca32b5d579da2cdad437d1801fe9baa3f4ec0d1a6d4f69d7c005ac269103ea86b99dda3e56d9dd13d3ef
-
SSDEEP
6144:LjXU7Pw5lDG1GuSlvNgT8+pKH89S9Oug6Gu:LjEs5lDG1zY0po89SrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 856078847a14126b1c9fdda15e20a70f_JaffaCakes118
Files
-
856078847a14126b1c9fdda15e20a70f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CFLHZ Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uVgf Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE