Static task
static1
Behavioral task
behavioral1
Sample
d5623e3231a12cc11f7b78bc7692e849_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5623e3231a12cc11f7b78bc7692e849_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5623e3231a12cc11f7b78bc7692e849_JaffaCakes118
-
Size
2.1MB
-
MD5
d5623e3231a12cc11f7b78bc7692e849
-
SHA1
2a8ae83062bec530d568c4da5b89a467dbd85cc4
-
SHA256
18474d65760b7b9a380b67975b030a89b5c4b21c646af107566dcb36526e6f1b
-
SHA512
fac5e8aba23e159f146abe70723bab173ddf4da1c518d68f8a1f48b1b6dcfce6f9d112873df8c65c01faf050cbc86fbbb5de91e26e4f6a7b87b414e80434f2c7
-
SSDEEP
49152:8AkFwd4UVhGm8fqbNLU1bROBBStlqtIhH3TeXdbNG:g2resebROBMTquH8dZG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5623e3231a12cc11f7b78bc7692e849_JaffaCakes118
Files
-
d5623e3231a12cc11f7b78bc7692e849_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
peC Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE