Static task
static1
Behavioral task
behavioral1
Sample
9635fe3b6c2c0c1522ee7cc458edb038_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9635fe3b6c2c0c1522ee7cc458edb038_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9635fe3b6c2c0c1522ee7cc458edb038_JaffaCakes118
-
Size
176KB
-
MD5
9635fe3b6c2c0c1522ee7cc458edb038
-
SHA1
5a59d6453f64f37d39f698cfc96d810ae2259a6f
-
SHA256
647c0e8654a0fa73877d9cbf79dac788f120f96a7e64eeb8c5c8204b60d718d4
-
SHA512
caa88832d2433f35b7cf65e5f3c2b3c8fc4c5574a037fa522348b51ab41fab164e66930c3b16b7736117feae7644895d80a8c605b06249fe89887bb014bd541b
-
SSDEEP
3072:Vq6gaKE8I3cl59AytWGaS2Q0Q2J68QIrAlIusMfMEeof+Un9aRpU:lgk8I3cFWDS2dQ2J68Q0UssFn5g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9635fe3b6c2c0c1522ee7cc458edb038_JaffaCakes118
Files
-
9635fe3b6c2c0c1522ee7cc458edb038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ