Static task
static1
Behavioral task
behavioral1
Sample
95b4a6b04a5cfbf95a76b47a5435198e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95b4a6b04a5cfbf95a76b47a5435198e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95b4a6b04a5cfbf95a76b47a5435198e_JaffaCakes118
-
Size
97KB
-
MD5
95b4a6b04a5cfbf95a76b47a5435198e
-
SHA1
51fdc4e2c590cf1d40ba0e7cc6b3291baaca41bc
-
SHA256
066eb1abbecadf1b3154281236b90eb0c036944e731e12f4a7f1ff49d51eef63
-
SHA512
ca31981aa46bc43cc9ee93b483fad5e65e85b42b6673e9362c612979d115e83c08d3140fa9222a8c5bb9b9bcef5d16d03a5193a05626b9b14f9644cbc4f4da22
-
SSDEEP
1536:VcOibM0ltO2EnHI70uqlKenYb2aZMplNLNdHCFyePKnRjoy4IcQJLxaV4Cr:6Oib9onuPqlKe/aZQ/nHCoUKVBM2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b4a6b04a5cfbf95a76b47a5435198e_JaffaCakes118
Files
-
95b4a6b04a5cfbf95a76b47a5435198e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ