Static task
static1
Behavioral task
behavioral1
Sample
89e0c32991d13954413fefb29e991a6c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
89e0c32991d13954413fefb29e991a6c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89e0c32991d13954413fefb29e991a6c_JaffaCakes118
-
Size
72KB
-
MD5
89e0c32991d13954413fefb29e991a6c
-
SHA1
9f287eefe815615cf003e75311a6d555a0d6aa69
-
SHA256
c7b750ca9be1df6cc6625a7525973c7c8cd4f90293276ef92779d70fb5a395b4
-
SHA512
6c11b49460f8e16e9bdc8bfeeba6c7ac2d1bcb92efc6a5dadd7e0894e0aa70b781271c52b8c9f1eac9143b1096ee25e8b8a4b33028b912f6d2afaba5e107efc4
-
SSDEEP
1536:VZQ3qrRlz06wQVirlPzsA0QIjibxp5iXlMcyvabEmrjggxdMnR1z89pGj9:Y3qL06RqxoumMxLiX2RVEyz89A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e0c32991d13954413fefb29e991a6c_JaffaCakes118
Files
-
89e0c32991d13954413fefb29e991a6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j8.b78ws Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6dnn4fh4 Size: 6KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE