Static task
static1
Behavioral task
behavioral1
Sample
95008596802eb3946a4005a9dc6f1d45_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
95008596802eb3946a4005a9dc6f1d45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95008596802eb3946a4005a9dc6f1d45_JaffaCakes118
-
Size
17KB
-
MD5
95008596802eb3946a4005a9dc6f1d45
-
SHA1
05fb2f5e15aeaec58fc553fb7d705df6a45c03b0
-
SHA256
6562ad6be11103644ba80e6c7091eb106316a9f6a4b7b863a442fc443d7506f6
-
SHA512
34428dda681266d40951104ec1ce947c96ea6a6bf6b4970d6ee341e736c3de390a4cc41ef4611526f4d7652a0af310e34d7e929e483027d5349638f6883da8a2
-
SSDEEP
192:qG9clZ0alkK35ufoYNO9a/wLPK/3iy4fyfY20xt9KLPKDMjRdRqDNUoyModkEzbo:t+IK35Y4a/wLrTH9KjKIFq+ao/gf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95008596802eb3946a4005a9dc6f1d45_JaffaCakes118
Files
-
95008596802eb3946a4005a9dc6f1d45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 371B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ