Static task
static1
Behavioral task
behavioral1
Sample
974f700cc4f6e3872a3ed1a6bbdae0d5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
974f700cc4f6e3872a3ed1a6bbdae0d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
974f700cc4f6e3872a3ed1a6bbdae0d5_JaffaCakes118
-
Size
415KB
-
MD5
974f700cc4f6e3872a3ed1a6bbdae0d5
-
SHA1
4ea418aac4751ee9b9cdd3f908011ae3900ac921
-
SHA256
90396be0d23df293f2a24f16da28401ff77cca672e6ba0472882246eafd4d165
-
SHA512
e7c766455197fb692dcdd40b80dbe3481550027659e4553f16f97f460a91aafe27207b194479bfa20e38d789f10349f6a3a0d550890795b053c92e3881e07117
-
SSDEEP
6144:YUC93sGiME/iDItjNs4weWCU7e6eM7vP3XKalCJkzeEUxnEVEcxW/bdzu2fOe5nc:2cGirKqs4wDv/n6alTeviKcx+dPnMOg1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 974f700cc4f6e3872a3ed1a6bbdae0d5_JaffaCakes118
Files
-
974f700cc4f6e3872a3ed1a6bbdae0d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 530KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE