Static task
static1
Behavioral task
behavioral1
Sample
889089b57bfca3078a30ba27433dfb40_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
889089b57bfca3078a30ba27433dfb40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
889089b57bfca3078a30ba27433dfb40_JaffaCakes118
-
Size
747KB
-
MD5
889089b57bfca3078a30ba27433dfb40
-
SHA1
69b4b15b6a3222f3f8b1f1324805fc4e3fb59700
-
SHA256
e8552dae633a1f599c98619529acf7dc9d0127ffe52eac4b7c72e465544bff8c
-
SHA512
2ec755649a8527593fd6ffa5258a06f10d2e9f1a36f0c19357b826d44d2f6047dd6919e63ca2f31f8dd45f3cd11c0e3312997d19b520358a3b3009a7147d4ca0
-
SSDEEP
12288:DjmwPvHm2OqV+4fweggZavO/xMsOacij0+jaMEFSZW2vWzOCfP84j0H+onROMHbS:DCKvG2OfYwexZkOZ7bcE0CEBXzOCuHtQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 889089b57bfca3078a30ba27433dfb40_JaffaCakes118
Files
-
889089b57bfca3078a30ba27433dfb40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ