Static task
static1
Behavioral task
behavioral1
Sample
9fd4129c3768fc2864ce9acf1514f15e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9fd4129c3768fc2864ce9acf1514f15e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fd4129c3768fc2864ce9acf1514f15e_JaffaCakes118
-
Size
64KB
-
MD5
9fd4129c3768fc2864ce9acf1514f15e
-
SHA1
79013b290505f689a0a9a0181fbf93ca85669131
-
SHA256
4c52260e7bbd55a1d410401a7fb673bf44b457b05f0de2042d39c8f8088d4bd5
-
SHA512
7d732f7d026e1940b45bdcc9a1e3fcc6a3c67b4adbfdb543fd8d035ba132210c3b91f90a5d71ba9ce6107fa46d6c4e7f99eca60c478bc9b245bd009e65f24662
-
SSDEEP
768:5UTN/9j0D5xq5Y4EGLIIAII4IOpnfMqWNU+K74FV2pRpWbSDHCHFAHetoAtwS1rT:OJ/9SQ5VtMqqU+NV23S2+t1hrNhenzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fd4129c3768fc2864ce9acf1514f15e_JaffaCakes118
Files
-
9fd4129c3768fc2864ce9acf1514f15e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ