Static task
static1
Behavioral task
behavioral1
Sample
94e3e302e54255b34e237c7b6740a063_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94e3e302e54255b34e237c7b6740a063_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94e3e302e54255b34e237c7b6740a063_JaffaCakes118
-
Size
15KB
-
MD5
94e3e302e54255b34e237c7b6740a063
-
SHA1
e97de2d72eface00a3a5d4de436560a0b5a8a54b
-
SHA256
fe44f23e9414982eb48c20c89a744bc07678e8e9beeb817074d2ae121483dae8
-
SHA512
9d255e532ffc1c3a32fca26f45fa1a8457f976acd5f5085e7b6c07e97764ab38d6602df619c0b22fe8561ec9d1d0b17d8706627680a8e9929fd6ce4a48c7a200
-
SSDEEP
384:pUbQ8c1u9XJr0z6eFOPZvjKF6VTBwyQwYPU:wQ8cctazwKYZBwA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94e3e302e54255b34e237c7b6740a063_JaffaCakes118
Files
-
94e3e302e54255b34e237c7b6740a063_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�[��ҧ� Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A��L���� Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE