Static task
static1
Behavioral task
behavioral1
Sample
870ff6fd88c4980eef88f25db173a1dd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
870ff6fd88c4980eef88f25db173a1dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
870ff6fd88c4980eef88f25db173a1dd_JaffaCakes118
-
Size
13KB
-
MD5
870ff6fd88c4980eef88f25db173a1dd
-
SHA1
9afc71c85a66e520ebc7f1fc97f91758850e4211
-
SHA256
0c828770dbe6a956d8a47303f7745c47ab4e66d5b4672a34f23810d16a6954fd
-
SHA512
cad63375b600d48c9b15abdd3516eaaff045f971be4f009581cbbdf2718a2c4d96a404527676939a7dd1c7dcce28c8e8f16e96a990136b0b5fdd6670e42347e8
-
SSDEEP
192:KveNN1M/NFmeNmO200qYAm8vV5gay0lEbEUlWtV1DY4kKViCFmcWoEwrbOYbRbWG:KmvuQOmknjgEU0RkKViCFKodvb9nfZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 870ff6fd88c4980eef88f25db173a1dd_JaffaCakes118
Files
-
870ff6fd88c4980eef88f25db173a1dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE