Static task
static1
Behavioral task
behavioral1
Sample
975f440074663b7e8e48212aeaf9442d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
975f440074663b7e8e48212aeaf9442d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
975f440074663b7e8e48212aeaf9442d_JaffaCakes118
-
Size
116KB
-
MD5
975f440074663b7e8e48212aeaf9442d
-
SHA1
5ebb582164ff5c441a0929e914ca5927364a47d6
-
SHA256
11170ccd51e5520c75e1bb1e69383a324a4675300d34d57f0f4c1068383d806d
-
SHA512
b7d02e501cd1df6ff0d192357d50248022395732cf1c1bce625e8dde4f1c6cc10d688f12398f778754291c2a33c200f975d01644a43635b28d273063164de549
-
SSDEEP
3072:g0smh6idBbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7Gc2j:RrdJwvP6bQ7yMP+DE827x2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 975f440074663b7e8e48212aeaf9442d_JaffaCakes118
Files
-
975f440074663b7e8e48212aeaf9442d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE