Static task
static1
Behavioral task
behavioral1
Sample
cedf7158c521806fea1a8800e4fd1641_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cedf7158c521806fea1a8800e4fd1641_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cedf7158c521806fea1a8800e4fd1641_JaffaCakes118
-
Size
31KB
-
MD5
cedf7158c521806fea1a8800e4fd1641
-
SHA1
e9d0baaa39805f5e1aa37a9021b266e5a8ba9abe
-
SHA256
f37140c770832f2dd617dca82b367e61a680235981e65fd8ea944a776f2b8648
-
SHA512
15243926a14dc24603d5e7d34f7e7ea01a64383096258e3e5938d7c64ccac483f1d1be9ac7061528bf6da0e82cad9898fa456208f1267cc5809f303316ebde5f
-
SSDEEP
768:qH6TNKU7C44UFi9X4A1do8gbdsOxhnbcuyD7UcNWGn:Tt774UFiG7dDnouy8cd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cedf7158c521806fea1a8800e4fd1641_JaffaCakes118
Files
-
cedf7158c521806fea1a8800e4fd1641_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE