Static task
static1
Behavioral task
behavioral1
Sample
9534e6250fa0c3675da08543c0fb6593_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9534e6250fa0c3675da08543c0fb6593_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9534e6250fa0c3675da08543c0fb6593_JaffaCakes118
-
Size
280KB
-
MD5
9534e6250fa0c3675da08543c0fb6593
-
SHA1
e5a0313a17a4214bc1d4531a72f4440838704fa9
-
SHA256
bf376453911e1f27b6a967feb7b7ba51a56abf079b91e52111b34e06c09a5ac0
-
SHA512
079b8bc3c67cf308d41de4db847898b31a5f0e76a7a3efb8001e166f1550814e0a5a66ec714f6aef9a6fbe2f6aee09aafda265f60a69b5e75d79969172b30fff
-
SSDEEP
6144:F3nmOAciDP7wlGswRv4oyp2ZQo5LL5+OQ6A1:fAcCqCGUQQQ6Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9534e6250fa0c3675da08543c0fb6593_JaffaCakes118
Files
-
9534e6250fa0c3675da08543c0fb6593_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 279KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE