Static task
static1
Behavioral task
behavioral1
Sample
a9fb4b5bd464b9b34c60b27d41619911_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a9fb4b5bd464b9b34c60b27d41619911_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9fb4b5bd464b9b34c60b27d41619911_JaffaCakes118
-
Size
456KB
-
MD5
a9fb4b5bd464b9b34c60b27d41619911
-
SHA1
eb59359056c0c9834592f4d8f047b8e11b738adc
-
SHA256
7458d1fe97d0e619af5d0501db5388863163a6bd864e3b6f1fadfbcf291ac06e
-
SHA512
cb94d7cfa9b14ec4afba6353d7e2b78f874094da202d8fce206921e89331db8e476b6a42cf6c1c26c1534c1ca8a7b9be1b2e0d7af66ad7d6ab3126fe01becdcc
-
SSDEEP
12288:caLjn0+ZsMw7hjiwqolusRtn2ZfOXv+zzG3B:cg/slZnqQ7bnYfmCcB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9fb4b5bd464b9b34c60b27d41619911_JaffaCakes118
Files
-
a9fb4b5bd464b9b34c60b27d41619911_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CYC0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CYC1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 429KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ