Static task
static1
Behavioral task
behavioral1
Sample
972ad693152b6abbfd7f012103214ee1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
972ad693152b6abbfd7f012103214ee1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
972ad693152b6abbfd7f012103214ee1_JaffaCakes118
-
Size
102KB
-
MD5
972ad693152b6abbfd7f012103214ee1
-
SHA1
d508a4e6f113cfd61f14ef16215ca2b4e1b239b6
-
SHA256
3bb8d4b8e7c5d262cf597649941283b8ace1178c7cf427c1f76754d58f06340a
-
SHA512
b0349a6a9cb3dd7ffbc79ebc3160c7b517072fba6c5f47210d76003d3ae5c1d8062dc5cde1133da78a8cfe052e2e4485de6db9bbb2b5562c19018eba34ffff53
-
SSDEEP
1536:cBbNuLpNTKXJgYFgpHb7ogX2661MBvpgbrbCNLpROemZh:cmLDTKXJjF677fXRYsp0baLpdE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 972ad693152b6abbfd7f012103214ee1_JaffaCakes118
Files
-
972ad693152b6abbfd7f012103214ee1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r2rc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NEWIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE