Static task
static1
Behavioral task
behavioral1
Sample
9653709d8f21716faf0f01d96e2cf58c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9653709d8f21716faf0f01d96e2cf58c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9653709d8f21716faf0f01d96e2cf58c_JaffaCakes118
-
Size
324KB
-
MD5
9653709d8f21716faf0f01d96e2cf58c
-
SHA1
7d09bdef7f664ec7514858f746bb0445643d65bf
-
SHA256
6d21c51efbc777efd00d16b7a6280a71ade8407155441cf9da844d0c0d8af196
-
SHA512
ac1e50c0cd14d847302d2d3b97b41a80be8012399f316a8f4c39ec619f73a3394a60b2ed754eef2e9c194f45435fdf99cd3e87c3baad5b00ca9355f9f0818113
-
SSDEEP
6144:05+5W/klU/OrNkVsuaRaU6mHGwN9dv7S9BUzzgLPPcibg8:q+5W8llJ0aRz6mHG/Af8cis8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9653709d8f21716faf0f01d96e2cf58c_JaffaCakes118
Files
-
9653709d8f21716faf0f01d96e2cf58c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ