Static task
static1
Behavioral task
behavioral1
Sample
948a6f2369bcc84c03a6b35c4c79fcb0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
948a6f2369bcc84c03a6b35c4c79fcb0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
948a6f2369bcc84c03a6b35c4c79fcb0_JaffaCakes118
-
Size
227KB
-
MD5
948a6f2369bcc84c03a6b35c4c79fcb0
-
SHA1
e08e20cc7e3b252848de7a1fdab10d7d901c62ea
-
SHA256
09246416cff40c7237c71a2cf81f87d4ad2ed302a363f557d0f72be499468705
-
SHA512
c2a940bdda44e5c83a32e5d5a227da83acf8b1185b6ea30ee66cc484a8a17a880c52235a9dc6ee8d67b461bbe7347619e56a1334f059931a56a14f3405af572a
-
SSDEEP
6144:z4Mvbl3Otouq3wZrQDvsxdf6Pr1fvIKEdTzuhOChC38usHfJY6En6T2TSCOCOdNC:kMvbl3p13o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 948a6f2369bcc84c03a6b35c4c79fcb0_JaffaCakes118
Files
-
948a6f2369bcc84c03a6b35c4c79fcb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.7dpfaa Size: 1KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tz9uoy Size: - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qc6o59 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0n2pfm Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.57aoz5 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3.0MB
.debug Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 119KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE