Static task
static1
Behavioral task
behavioral1
Sample
89f40030a8f8192da50fc24d5fa67f3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89f40030a8f8192da50fc24d5fa67f3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89f40030a8f8192da50fc24d5fa67f3e_JaffaCakes118
-
Size
30KB
-
MD5
89f40030a8f8192da50fc24d5fa67f3e
-
SHA1
16a16ceb32dc6b1bc589b2f920f21f29030476e4
-
SHA256
7fd6a2aceef999175f79c1b4c043595a4ffc24c7d31848128b8f0d5f765d9e9c
-
SHA512
4a3f23296fc2df1e37ef236d74b3464c9b4393132aa65d7f7f2a5c92fc32d00590778a26dec86d53dccd735ec2658681555d5683d23e0d7a17768a80eb0deee7
-
SSDEEP
768:NqGTY2IaD5JRemrvpj4p2f0/P+nbcuyD7UNqz:cUY2dfIgRlcOnouy88z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f40030a8f8192da50fc24d5fa67f3e_JaffaCakes118
Files
-
89f40030a8f8192da50fc24d5fa67f3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE