Static task
static1
Behavioral task
behavioral1
Sample
95887d580306c629d99cdb826a21f72a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95887d580306c629d99cdb826a21f72a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95887d580306c629d99cdb826a21f72a_JaffaCakes118
-
Size
1.4MB
-
MD5
95887d580306c629d99cdb826a21f72a
-
SHA1
1c31748b343b964579735347106b5fdca5823861
-
SHA256
07e0b425a5f23e3053c0f1762348be04ade277aca9a55148be4a998ab6a6d783
-
SHA512
c0474ac981eee18c0921c110b86c99de5868281264bc03375a85ef65e4969ffda382348bfd6b0b9291f9b8533f63d4367ce2f765c8659a45eed858a23de2fbbc
-
SSDEEP
24576:JYIqPRHdkZHtrOA6dW1aeJlFK1Tn1LfWD2RZ5+urZQM24ag19dw7vdP8iGiH48O1:JY7PR9IHtaI1ZJDK15DeiZR2G9dwrB8B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95887d580306c629d99cdb826a21f72a_JaffaCakes118
Files
-
95887d580306c629d99cdb826a21f72a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ