Static task
static1
Behavioral task
behavioral1
Sample
89f762877f36e3f2fb387de751060898_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89f762877f36e3f2fb387de751060898_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89f762877f36e3f2fb387de751060898_JaffaCakes118
-
Size
52KB
-
MD5
89f762877f36e3f2fb387de751060898
-
SHA1
4aca9ac66b41cf03831c86a3afffcc9e0becdba8
-
SHA256
817c3d81ac550942146e96aed388b36a93cb1c6b64ca8373e216929c8c51addb
-
SHA512
601a69f7aab123b158fd3d53da744465ef5acd9f019c84435d093a86195d120c1bcd855f6133f2f5201504b5c5c2d533c9ea3864fc714ce9bae87dbfd367a5ad
-
SSDEEP
384:h5cmLaNxfr2AH+rwhADUcDG48jNrpxNrpaUNrp8jk+BJbf4HHHHHUHHHHHnuysdx:dOL2PfDn70FLF7FdVHP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f762877f36e3f2fb387de751060898_JaffaCakes118
Files
-
89f762877f36e3f2fb387de751060898_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
javacpl Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Update Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Shell Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE