Static task
static1
Behavioral task
behavioral1
Sample
c9692dd5222cf902d342ea5529d8c62e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c9692dd5222cf902d342ea5529d8c62e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9692dd5222cf902d342ea5529d8c62e_JaffaCakes118
-
Size
9.3MB
-
MD5
c9692dd5222cf902d342ea5529d8c62e
-
SHA1
95b85573a9421ecb0b3e5d4449fc0d406677df88
-
SHA256
fcf47c9f92b8ef25931e6bb9be52253a202b99fe1f60d7a26897ae08c0c0b090
-
SHA512
c58e0f230283758db6e88945c8cab32c55304c4892fb58885845f6ecddafccd3d81c79a0853fe1f81bd68abbe4b4796ae12927be2935dda18b8aa14391cf3762
-
SSDEEP
6144:v0XqCA9itRTCq5Gq2BD+EfgCPlz0FFH+0QfAzM0tWqO/54BG2YYof:v0XdCOGpBD+KgCpmCAnO/54E2YY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9692dd5222cf902d342ea5529d8c62e_JaffaCakes118
Files
-
c9692dd5222cf902d342ea5529d8c62e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ