Static task
static1
Behavioral task
behavioral1
Sample
895ac6c5e02908c7bd96ed0c82467479_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
895ac6c5e02908c7bd96ed0c82467479_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
895ac6c5e02908c7bd96ed0c82467479_JaffaCakes118
-
Size
88KB
-
MD5
895ac6c5e02908c7bd96ed0c82467479
-
SHA1
541fca108f7104d8b1e47f1a9acf0d22499417f7
-
SHA256
cec6a38272144825f3441f0f778c7e172620c8bd7774e7b827d27c9826c0b39d
-
SHA512
5db7e6af44d97f6e984322d667840b241265379dd9ed8b6dc1104d03d907467b08905d941ee6a34edd8e18b394cb2061a1553b64c851e80cb19fb1c7ff2dcc45
-
SSDEEP
768:xg3+1NT2ezZEatuHqLPkhEryY5USTMSuHcj19lmVWUE2q7NRbCxX5HoL3/QZZHwq:xu+1NvZmhtYhUKLPyQH2xEAAwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 895ac6c5e02908c7bd96ed0c82467479_JaffaCakes118
Files
-
895ac6c5e02908c7bd96ed0c82467479_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�S=`� _� Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E��<�� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE