Static task
static1
Behavioral task
behavioral1
Sample
c9835750d507d52a989fc9b7fc6e6969_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c9835750d507d52a989fc9b7fc6e6969_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9835750d507d52a989fc9b7fc6e6969_JaffaCakes118
-
Size
86KB
-
MD5
c9835750d507d52a989fc9b7fc6e6969
-
SHA1
ee62f6e7c657a3384c38d2b970259f18f684c642
-
SHA256
f844dda02fcfa01f4170e4965a28cd5637ec231ff7ec395d354a3851243eea7b
-
SHA512
d674281e030980345d0daf6436cc5d28c24a40910e6835c28dc5b62a2120aa148973269dc14e6814ebfeac558ea02ebace4e34fbd6a7d79d209f5e19387e2dd8
-
SSDEEP
1536:Y/Gaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+lo:q5MaVVnLA0WLM0Uvh6kd+lo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9835750d507d52a989fc9b7fc6e6969_JaffaCakes118
Files
-
c9835750d507d52a989fc9b7fc6e6969_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 776B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ