Static task
static1
Behavioral task
behavioral1
Sample
89dfb10410d4c8c05d068377c3584217_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89dfb10410d4c8c05d068377c3584217_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89dfb10410d4c8c05d068377c3584217_JaffaCakes118
-
Size
8KB
-
MD5
89dfb10410d4c8c05d068377c3584217
-
SHA1
192591d42b33bd041b42211ba7587d0532ba3342
-
SHA256
cbfdc96f9f52493ac335abe4d50e04ad00fc5ad4025ad1b21f8d5b56e74414aa
-
SHA512
fa299ea8c4c4975c274df6173a22425927e1b608c629a5fe782ab7fd2a3d19e8ffa2cfd42f47b5403e7947c1666d2805a1ac3ad31b3b1fe8cd72c4ec934f17ba
-
SSDEEP
192:zMvLTXi8BFv2UWo/CRo8+nKR7ex4aLyQenChsYpk3Ii:yTfFv2U3/mo8OKRy40enCmYpkH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89dfb10410d4c8c05d068377c3584217_JaffaCakes118
Files
-
89dfb10410d4c8c05d068377c3584217_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pec1 Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: - Virtual size: 1009B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE