Static task
static1
Behavioral task
behavioral1
Sample
c179378005d7e04b6ceb496fde3c399d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c179378005d7e04b6ceb496fde3c399d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c179378005d7e04b6ceb496fde3c399d_JaffaCakes118
-
Size
151KB
-
MD5
c179378005d7e04b6ceb496fde3c399d
-
SHA1
e2560c5b882837c3df39f94e717e02e22f979b68
-
SHA256
af4503b6ae140fc9100ff284a19ad2b38680a74f97d008f52cc2774ff5156c8f
-
SHA512
03219794ddb1c34cceb1b6df2cea518b65851544d7bd13517fdbd76e9367c7e067c25fbc59ac40609de1adb61c98efc9cc3cd44742bdba0647044317fb565051
-
SSDEEP
3072:D3Rdrls+uvmgcT4DpRhBDaRPyTFwQlfbzQU5an7l2TIzXeTnKx:+mD0DpvBD6PVSzz0zXeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c179378005d7e04b6ceb496fde3c399d_JaffaCakes118
Files
-
c179378005d7e04b6ceb496fde3c399d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
6w3r570 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6w3r571 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6w3r572 Size: 48B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE