Static task
static1
Behavioral task
behavioral1
Sample
892569a6d2d94549b8e4ac9b25fcbf29_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
892569a6d2d94549b8e4ac9b25fcbf29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
892569a6d2d94549b8e4ac9b25fcbf29_JaffaCakes118
-
Size
97KB
-
MD5
892569a6d2d94549b8e4ac9b25fcbf29
-
SHA1
9e6309e85bae009293cd842fda73b7b4970b79fe
-
SHA256
94bfc95d8d761aa869ff6a581095c5ff30a57efe1097a932c1e0e3d970e03eb8
-
SHA512
228ca21e6097b0a620476ccc88a503d9f7bfe0771f72c11811b70481d6f81a8c0c6a23a8e09c3cbdce5815eb2e0b0089eff0e0605b2491e1e16e8a992c9a3330
-
SSDEEP
1536:q6yK0CWp3GRf9s/hEm0iv9O/pAdsmKAXTA/T5Op:ryK0CWpWRfm/akvfKeTAT0p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 892569a6d2d94549b8e4ac9b25fcbf29_JaffaCakes118
Files
-
892569a6d2d94549b8e4ac9b25fcbf29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ