Static task
static1
Behavioral task
behavioral1
Sample
c261cf4bd91cc48615e39e85a301f05e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c261cf4bd91cc48615e39e85a301f05e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c261cf4bd91cc48615e39e85a301f05e_JaffaCakes118
-
Size
163KB
-
MD5
c261cf4bd91cc48615e39e85a301f05e
-
SHA1
cbc9a7194a82b558268af63a11e8967bd5d6221f
-
SHA256
05356f9c5c34943e21172242c6c50e68a0fc8b534733ffc4c22b6174593b2abf
-
SHA512
3921d8cbdd3f55d3fd617fad7157e9eedb42675dc3a27be562cf792f658535f8a0829e8c474afae0a937e17168cd82674c1104d7fb5f5ebbe74a1907c0c60a2d
-
SSDEEP
3072:qxzEY17Sasm0131o/wwdyj4SNCyd/CFz1rF8dKBbfeADNnVoiDdPSFlaFlhJRboP:wzESb03o/wK1S1OzvO8fdNDdPSFMhwUw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c261cf4bd91cc48615e39e85a301f05e_JaffaCakes118
Files
-
c261cf4bd91cc48615e39e85a301f05e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 65KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uro Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE