Static task
static1
Behavioral task
behavioral1
Sample
954a287d6973afa07e56cedc7d679c75_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
954a287d6973afa07e56cedc7d679c75_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
954a287d6973afa07e56cedc7d679c75_JaffaCakes118
-
Size
383KB
-
MD5
954a287d6973afa07e56cedc7d679c75
-
SHA1
331dcc896533da56fd10cc9517f1eb8362e15b46
-
SHA256
0af7ddc16306bec8f25c336960b135cb41f57de84781cd5aab86c423b49b448a
-
SHA512
295df670256e4895b53cc890e443ff077d9c8a7b746ae2d2a10a3287b9a110c1b79f4e4be10bd26c87a19841d275eae6c5384c1a806bbf72095bb4c42ff50bc6
-
SSDEEP
6144:nbVQn9O4zoK8RpL++JLyU6jcnt+a4MQv+0SNhLGc1RUsIlrbLKmcP5EPnIN/021V:iFoKOGgnMMitSscDbIlnLKREPW/02As
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 954a287d6973afa07e56cedc7d679c75_JaffaCakes118
Files
-
954a287d6973afa07e56cedc7d679c75_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.CQSN Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CQSN Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CQSN Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE