Static task
static1
Behavioral task
behavioral1
Sample
8679c057781e0d38af5b8e27cdb32301_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8679c057781e0d38af5b8e27cdb32301_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8679c057781e0d38af5b8e27cdb32301_JaffaCakes118
-
Size
15KB
-
MD5
8679c057781e0d38af5b8e27cdb32301
-
SHA1
06502cc92fbc8e8a13cdca6e5343a9e7de5acdc4
-
SHA256
6c5ac85d40f7db804a9ae3be83045881869675c7066c0eab1ca1dfc79c5d2784
-
SHA512
33d1fc3e01e74084ca1b60bb478f0fb7b81690fb6fe6b3e2129d069b40d9a9773bd4c326220aa99b78d88d7cb4dcb335fb5acaf073b0b991c027cc13c1ff25cf
-
SSDEEP
384:LyQ9KaonyJpdO0GzutF9wQygEDmk/5HWZceIUb:zKzyjs0GaPN1oBHWZcTk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8679c057781e0d38af5b8e27cdb32301_JaffaCakes118
Files
-
8679c057781e0d38af5b8e27cdb32301_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE