Static task
static1
Behavioral task
behavioral1
Sample
9483b150584e25cb63239a0b83245b4f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9483b150584e25cb63239a0b83245b4f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9483b150584e25cb63239a0b83245b4f_JaffaCakes118
-
Size
1.4MB
-
MD5
9483b150584e25cb63239a0b83245b4f
-
SHA1
38cffd53d8b9f380b59902cf1f811affaa214f88
-
SHA256
f2e5fca7889447cfe726bfd8165d9d14b9a0b9f7d2073e9dc95c783e16162477
-
SHA512
0d184a88f476e8feb455f700f143f52696ee0133928e7032c8f8702aedf81f8264a0498505aa027f949bd53d4a8ced215280133f05d8a128db83a4edfb7719d3
-
SSDEEP
24576:gjVCP6VjbDoA27cNM0Q9Y1pDk0wwuFQZfpcYRzDGotmT8hYf5AlMcOUIvD937t/z:+bIYNy9YhwwiOBkTgYyMchIJLpzNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9483b150584e25cb63239a0b83245b4f_JaffaCakes118
Files
-
9483b150584e25cb63239a0b83245b4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 464KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqtest Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE