hehe
Static task
static1
Behavioral task
behavioral1
Sample
94e85865ac41c7e8c3bc63d2013ae106_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94e85865ac41c7e8c3bc63d2013ae106_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94e85865ac41c7e8c3bc63d2013ae106_JaffaCakes118
-
Size
10KB
-
MD5
94e85865ac41c7e8c3bc63d2013ae106
-
SHA1
aa75dd10939163637894952440c22d600501d9c2
-
SHA256
7d5320317479f03c2b95fe3e28fe0d12ee83a159d43b369e5a74ed1d2e5a4791
-
SHA512
c55ad13ef4693558ab39ae5a5fde3fb731e16b90b60afda6488a53a5bf3ec5f7f1687266eed2dd6903242eaa05cbbd7e4de22ebdbe9762b89b4b798ffef7cc76
-
SSDEEP
192:uqD53GgdMnpCicrWCMxPyg/SCmlxT0COWBIEPRG1AHCleHx9tPkgUwuF:uoJGvSWChg/S5jb1ilox4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94e85865ac41c7e8c3bc63d2013ae106_JaffaCakes118
Files
-
94e85865ac41c7e8c3bc63d2013ae106_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE