Static task
static1
Behavioral task
behavioral1
Sample
c281785c5b33a865d04db82521e6ece5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c281785c5b33a865d04db82521e6ece5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c281785c5b33a865d04db82521e6ece5_JaffaCakes118
-
Size
268KB
-
MD5
c281785c5b33a865d04db82521e6ece5
-
SHA1
6ca4ab65f2337284990c50201ec2df4ac8005ba5
-
SHA256
d04034e7a2fe2d787688aded36b2c1dd490a6d0ec21ef19124444ee5a6431762
-
SHA512
78f9e88c3ac31eadb392a809125a1a81e2be8313f36b96c11cf7db0df684e94079868847d492fdbd03f9ddc0ec29384da9b568ad847d4fa218a65b203f6425d0
-
SSDEEP
6144:qY94NOK3q6yWHI7bLmtYwctDLfqKPsR3/+v7UW:59OHqVgI7f+SLSpRmUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c281785c5b33a865d04db82521e6ece5_JaffaCakes118
Files
-
c281785c5b33a865d04db82521e6ece5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ