Static task
static1
Behavioral task
behavioral1
Sample
c89ede8b35c606712bb49ea64470aac3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c89ede8b35c606712bb49ea64470aac3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c89ede8b35c606712bb49ea64470aac3_JaffaCakes118
-
Size
116KB
-
MD5
c89ede8b35c606712bb49ea64470aac3
-
SHA1
20925509541628162c8771399ff3a08ac7ac4ecf
-
SHA256
45143ef8f0c8f4f228f98e3b091f29d5d35fadaf05440200bb59b043d7eec41b
-
SHA512
e3111d776285f929c38c8417ec1c0987d64c4411e3102bc4b63c7333cf8ba9d14aa979ef6fc3e982c58c72a18d6ed14a55c00926485194619d214aee40c26b72
-
SSDEEP
1536:JfqI4C+17bgNeuscVq/GcQFqtEN3beDF8fvNXaE:Jfq1rd580mN3be0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89ede8b35c606712bb49ea64470aac3_JaffaCakes118
Files
-
c89ede8b35c606712bb49ea64470aac3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE