Static task
static1
Behavioral task
behavioral1
Sample
9652fdda935637829c80504876f9319b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9652fdda935637829c80504876f9319b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9652fdda935637829c80504876f9319b_JaffaCakes118
-
Size
186KB
-
MD5
9652fdda935637829c80504876f9319b
-
SHA1
563f52244906172940bbfa4e149209aeabd5360e
-
SHA256
5e85d5fa4daeb71eae36c7e6486fbca47bca04e8f99aa39d8385d35033e26b66
-
SHA512
974fdc63330b8945d32f103a90a917d2119943e7652ea3f9365817068bc6072db5a6f2ea5b1285004463098108facb38cd1f2542bcda4cbf7c9d2bfa3f8d15f5
-
SSDEEP
3072:oDAekbaI5wZbptKErQER3wVZOBgv4DYm1gVUPGy787iJNjtR5fwn6w:7eYaI5CVMQQER3wVZOBXQEo7wtLfy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9652fdda935637829c80504876f9319b_JaffaCakes118
Files
-
9652fdda935637829c80504876f9319b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
����a Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�rsrc Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����a Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE