Static task
static1
Behavioral task
behavioral1
Sample
971762d59112106a9fac6bc2d87777ad_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
971762d59112106a9fac6bc2d87777ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
971762d59112106a9fac6bc2d87777ad_JaffaCakes118
-
Size
31KB
-
MD5
971762d59112106a9fac6bc2d87777ad
-
SHA1
1f4a308fef61c448814fdc62656b695c202b6a83
-
SHA256
df82ee2e4d70d4ce990de03c401a93d182850446d9cee25090496f29512cc061
-
SHA512
c28993b08185d09e58472b2d47e2c1bbc66be01da9806f20192ac15daf40d4d186aa688562c331eb0d5c3d2ed77be7659174825ba7bc8edda51f1250848afbfb
-
SSDEEP
384:cFD976yCX3IpZmU0kgXxxA4HQ1X/LoF0dK9RRe79Ef3YpanZ9J5tKuoKHW:cFD72IpZmU0Hj8zEaiRs+LzJqulHW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 971762d59112106a9fac6bc2d87777ad_JaffaCakes118
Files
-
971762d59112106a9fac6bc2d87777ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE