Static task
static1
Behavioral task
behavioral1
Sample
953b10bab4188211a7252d2165d32f68_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
953b10bab4188211a7252d2165d32f68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
953b10bab4188211a7252d2165d32f68_JaffaCakes118
-
Size
145KB
-
MD5
953b10bab4188211a7252d2165d32f68
-
SHA1
6ecc634479f0b1e7cc4c9c035ce07bec202d5134
-
SHA256
f5c6d774f6fa45eff9daa2193ed716737059d5c54e0c3b5347ebd405dd4a9ec8
-
SHA512
b5dfccd8413c85830b5e93c6ee12a2ef315dba8c42770d5f73869453389a075457a09594fd48826c9b63774ee0a4c4e9de866f44a9bd5b596574ac3342fd1a10
-
SSDEEP
3072:jaACPpIdjrAEnNoBmyyjINfI0Pr8K7OCfGQayCH5eR0DT3ifDoutR:jhCP4r4AjM5f7dOyqe+DT3ifDoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 953b10bab4188211a7252d2165d32f68_JaffaCakes118
Files
-
953b10bab4188211a7252d2165d32f68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE