Static task
static1
Behavioral task
behavioral1
Sample
c09c06db4597f89ae0d2da1641ff6d53_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c09c06db4597f89ae0d2da1641ff6d53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c09c06db4597f89ae0d2da1641ff6d53_JaffaCakes118
-
Size
21.1MB
-
MD5
c09c06db4597f89ae0d2da1641ff6d53
-
SHA1
ea019f9f429d1e6c855c2715c63a90603a00e794
-
SHA256
b4a4ea48b5a89705e948f1abe6b81cc57cc803c522e360b099bed4c851cd064f
-
SHA512
610fa4cf7fa753be4c8e2045146524d1ddb1374d2afc2661dffd7d872943bd84a76a0d8bb60cde79e7719aecf05df4d8192f4ab7d5f80c4127728d8cf7117b89
-
SSDEEP
12288:FlufVlvHgzB6RLahZAFYfaqUTlqi6jVThF+PzGl51VgzMPZkwzFpVJ2HbwKEGfbJ:FIHkWkaqXThMGYyCeh08Z0h/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c09c06db4597f89ae0d2da1641ff6d53_JaffaCakes118
Files
-
c09c06db4597f89ae0d2da1641ff6d53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ