Static task
static1
Behavioral task
behavioral1
Sample
c88366b485d242abf5c5d41769c2d538_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c88366b485d242abf5c5d41769c2d538_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c88366b485d242abf5c5d41769c2d538_JaffaCakes118
-
Size
141KB
-
MD5
c88366b485d242abf5c5d41769c2d538
-
SHA1
629baf4dfa97c128515f62de48cac3f8e86bafac
-
SHA256
4314beeb5463cec1e412d9ad77c6045427eeea14647bd97e32132ac195ed435a
-
SHA512
64e710eac2c73555c7f0b947b9e521a0d3b456204da7d0e54ce90d61b65198d219395e6cf00da5298703497118afc57512e24b7947e9c7d1f70c8afbb7071bb9
-
SSDEEP
3072:ojD+BR2rURbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVl:aD+BROU5wvP6bQ7yMP+DE8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c88366b485d242abf5c5d41769c2d538_JaffaCakes118
Files
-
c88366b485d242abf5c5d41769c2d538_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE