Static task
static1
Behavioral task
behavioral1
Sample
854763711d054a1c134d6b71d50653b7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
854763711d054a1c134d6b71d50653b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
854763711d054a1c134d6b71d50653b7_JaffaCakes118
-
Size
75KB
-
MD5
854763711d054a1c134d6b71d50653b7
-
SHA1
fc039dcf4ee42cbbc770adec46da95f2b2fa430e
-
SHA256
5869bae054812479217348af137f6c58c066a024579df05785ba5cef40e74d2a
-
SHA512
91347de9568a2956eb4657fcd4940f32d66454ea1ab25ef9b3a5dd20a0b4a6e410f43bdb41b8a243ece37a0674cd1b0d2c9d5a22c95b74ed4e08d36f88995e67
-
SSDEEP
1536:tOnlKmhNUk5BqoEcQyrCXLR04UxHzMUsxdof+:ElRFqoekCbZU1zMUhm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 854763711d054a1c134d6b71d50653b7_JaffaCakes118
Files
-
854763711d054a1c134d6b71d50653b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 74KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE