Static task
static1
Behavioral task
behavioral1
Sample
879a49e69e00a213baac3329fb9538f1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
879a49e69e00a213baac3329fb9538f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
879a49e69e00a213baac3329fb9538f1_JaffaCakes118
-
Size
127KB
-
MD5
879a49e69e00a213baac3329fb9538f1
-
SHA1
3ca1ccee162960ce90e9f54381f6ae514b918ab4
-
SHA256
716418ad502421e40ccae55178ca208d5b661449257cc4818438a746b9f3c9f4
-
SHA512
a8f4b7414ae0e8b8df342340c80ef990597d70f4e90814cb7724501d2b5820d095fb0891162422428177ac16a38844d83a7e3bf9d73f579ad3d545d90c9656e0
-
SSDEEP
3072:fdPrKNvI/shgbQYUIAUYMwwA7Im6WNlCbL89m+f:ft2+4gbQYDlbAJ6WObLzs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 879a49e69e00a213baac3329fb9538f1_JaffaCakes118
Files
-
879a49e69e00a213baac3329fb9538f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
4lxno Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wp Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jqj Size: 4KB - Virtual size: 1005B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE