Static task
static1
Behavioral task
behavioral1
Sample
94b65783f1821eda04e841592ae7f723_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94b65783f1821eda04e841592ae7f723_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94b65783f1821eda04e841592ae7f723_JaffaCakes118
-
Size
25KB
-
MD5
94b65783f1821eda04e841592ae7f723
-
SHA1
8fc680ac6bb2aa5b97dc3071bf5b5fbce0287896
-
SHA256
67dec2409af90f8e5bed31d26c38506411adecb1e25fe32b6c11a9af8075fbff
-
SHA512
300dd681959e7e98c0646e1539146ff0e0d856e304c6569ba939747f8f53ffc4b8a8db28f9e7d78738843d360925e5c3f6ec5504d2948cf01f7445971290947f
-
SSDEEP
384:mrzM2RAldJQ9RpbgdVCIH4CiILFWnRV1RDs9SLGhvEEsoTRebostOp:oMqQDQ3pbgdMAuILKbRY9EHEsocMstK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94b65783f1821eda04e841592ae7f723_JaffaCakes118
Files
-
94b65783f1821eda04e841592ae7f723_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ