Static task
static1
Behavioral task
behavioral1
Sample
893e9f0d34f2220821ed6232f28932c3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
893e9f0d34f2220821ed6232f28932c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
893e9f0d34f2220821ed6232f28932c3_JaffaCakes118
-
Size
96KB
-
MD5
893e9f0d34f2220821ed6232f28932c3
-
SHA1
4d44766ce6cdcc12c066dd6e3f947cddb8da3f07
-
SHA256
8d56d9a965736431856ae711d1869172af983eba2627d6cea8e702caac050c1c
-
SHA512
71ca6b29fe5dd666c22b1224dec873a6039105b175fd0008e9c5a2f02fd5f1d4efa051903700122f66d91077da21233316a30007b42e0855e53be6103b543c77
-
SSDEEP
1536:xe4B+zcSRiRqrf3noFapwcrbXki0JJ2C6n5WYG2uyBrNMFxosZZPdzCVVU/uM6X:LB+oS4+3aapwcfXki0JJR2unFxjbx7u5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 893e9f0d34f2220821ed6232f28932c3_JaffaCakes118
Files
-
893e9f0d34f2220821ed6232f28932c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.O Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE