Static task
static1
Behavioral task
behavioral1
Sample
c968519dd9debc1a21cff1cb6833daf9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c968519dd9debc1a21cff1cb6833daf9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c968519dd9debc1a21cff1cb6833daf9_JaffaCakes118
-
Size
633KB
-
MD5
c968519dd9debc1a21cff1cb6833daf9
-
SHA1
01f726dbf779f73f029da2f5a20cd8726e38ab51
-
SHA256
778c9a4c1cc284c6e9f8e7aa44b20d288131ba4a74ca23e62454bc428a9a526f
-
SHA512
d355cef6cb3b06be42dfdee3bd1654f796294976036fbba741769a5c087da81184504f454ebf294ec93eae84fe98279954adbfaaa4c15e6c91c24a2c29bd47f0
-
SSDEEP
12288:/z05p/hXiGGK0cH1c1PSyAnH0UQWFWDjDKmTl/gl7+Qw0:sJhX9GK0ciQI/+mTRgce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c968519dd9debc1a21cff1cb6833daf9_JaffaCakes118
Files
-
c968519dd9debc1a21cff1cb6833daf9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 238KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
update Size: 389KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE