Static task
static1
Behavioral task
behavioral1
Sample
93ee60bf833e4dfe41b37af958d90d81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
93ee60bf833e4dfe41b37af958d90d81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93ee60bf833e4dfe41b37af958d90d81_JaffaCakes118
-
Size
390KB
-
MD5
93ee60bf833e4dfe41b37af958d90d81
-
SHA1
ce61aa0ffd2d31cfa148a5b9fb032e91526a109d
-
SHA256
aa22f89fd75b910455a1c2db17b7a746894eaa4a9d9f40e2df802f22b660a9f0
-
SHA512
de8b485e7c40bc9e16e66b3d6466b49651ef3e2d68bb65b04b345282521ce358d3a39d9a4d6297c49f5e759c645ace03ab890d723a8d422d547fe0ac68c426df
-
SSDEEP
12288:u52QhvajcZ/JLJGq3oF6zHBKLxAWeXO41b:GfyQZ/JLJG2OGBKLSWidb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93ee60bf833e4dfe41b37af958d90d81_JaffaCakes118
Files
-
93ee60bf833e4dfe41b37af958d90d81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 386KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 553KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ