Static task
static1
Behavioral task
behavioral1
Sample
866b31bcf82382304ff10aab8edafa23_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
866b31bcf82382304ff10aab8edafa23_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
866b31bcf82382304ff10aab8edafa23_JaffaCakes118
-
Size
13KB
-
MD5
866b31bcf82382304ff10aab8edafa23
-
SHA1
1a7ec04bd37a11cee32235c7507c1d74df4ae847
-
SHA256
78e42674d0e4a1b57c5246b2e553ad699504f2cb67b4817cb227700444b1741b
-
SHA512
46a8494093422cd7f27726b6126678987df812af511200bb81e09ac8b615a8d4714224587d6ee95f0aa1b6271011b2f6430768df1647f7edc39f5fbc119652f4
-
SSDEEP
192:Caf4PSiGU76OfOwm5AUh2kyg4I0owqFCf/Hrvvmer+vtmVWQ1+7IiHLpApgt2tJ9:ClScRDkygrNhEmeVVtwLOpzMT8n9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 866b31bcf82382304ff10aab8edafa23_JaffaCakes118
Files
-
866b31bcf82382304ff10aab8edafa23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ