Static task
static1
Behavioral task
behavioral1
Sample
972ca44c3247c668459cf49987d15040_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
972ca44c3247c668459cf49987d15040_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
972ca44c3247c668459cf49987d15040_JaffaCakes118
-
Size
388KB
-
MD5
972ca44c3247c668459cf49987d15040
-
SHA1
b30665a4d71d71b9b6b06449004d4a152ca15c01
-
SHA256
f76bcab739e584a834c702bc6ee7483c8099b5fabcb5739ce742b530575ef2eb
-
SHA512
130a2aa3043a8bd97f3c6ab2d1998f32f717b3fab10f00c7677942d5c7bb17d8f246114d6956de3aa5a253a6295c4497c2ac6c22e7c33177dfbf636d86231df3
-
SSDEEP
12288:c/zw/RLX96vCi/H5RVJWPCZHB4gjvzOEn:c7UX6xRVJWPCVB4cnn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 972ca44c3247c668459cf49987d15040_JaffaCakes118
Files
-
972ca44c3247c668459cf49987d15040_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 100KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lkdjfks Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE