Static task
static1
Behavioral task
behavioral1
Sample
95c5122368dd874c301465ab287abf37_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
95c5122368dd874c301465ab287abf37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95c5122368dd874c301465ab287abf37_JaffaCakes118
-
Size
65KB
-
MD5
95c5122368dd874c301465ab287abf37
-
SHA1
4341d16889d7096bb7bc3ace49ab7714402c7c99
-
SHA256
1398da69506f62cce102915502430e7e7399e3f5cc5b5eaf51ebdb22502e5eb5
-
SHA512
8b79a5801b2413a58b3ba0e919da2cfe10cf7ef3c60342685463dcac46aac49cb80c0041be7ad4545cd296955327f04449579c901a96a083592d390e691d0d64
-
SSDEEP
1536:ZOZPCSpUfZaHFMZq0+9Ge8zwoLRnn+vNL:U0SpUUlyqp9GEin+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95c5122368dd874c301465ab287abf37_JaffaCakes118
Files
-
95c5122368dd874c301465ab287abf37_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE