Static task
static1
Behavioral task
behavioral1
Sample
862ecf792217b8ddeb92b9da53e7b143_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
862ecf792217b8ddeb92b9da53e7b143_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
862ecf792217b8ddeb92b9da53e7b143_JaffaCakes118
-
Size
1.5MB
-
MD5
862ecf792217b8ddeb92b9da53e7b143
-
SHA1
731c6964672c1eba7cab973ef1adc4558bc13ba8
-
SHA256
67f2e1c480adefd4c802c26f64c98147033e03ce4223ca02581b878e84f711e7
-
SHA512
f56cfb21f5dd542cc43255cdea5732ff9218330247da9076d04c8e070e8e2f8cd7af4f7e934ca90c6d6dc47c2e61613ab218d35374a1cd151a350b958f82f518
-
SSDEEP
24576:SNK/K0j1XzymToy5CeEwMZ5wwlu5itcWfhxRlrXgIuFYfU0muCpmGDCP3ZdF:dfEwOwwiW3vO3sZdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 862ecf792217b8ddeb92b9da53e7b143_JaffaCakes118
Files
-
862ecf792217b8ddeb92b9da53e7b143_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wyze Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE