Static task
static1
Behavioral task
behavioral1
Sample
f0473ce14f4b020873f4074e66ba1827_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0473ce14f4b020873f4074e66ba1827_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0473ce14f4b020873f4074e66ba1827_JaffaCakes118
-
Size
920KB
-
MD5
f0473ce14f4b020873f4074e66ba1827
-
SHA1
aa0f66c9046e639d1af9b0a9fc310ae67046c32e
-
SHA256
f93f52e3fd15398d34f478cf50d9afacbc77b5bbfd411044e96a4d21ba6ec3d3
-
SHA512
15374029b49314039b51c17af5f40846f1701cc3880e7b0b743b0518ab3557c40e0bbd114cade0f930e61cfb3c71a267e8be2db3300962f4928ef2c359c77f74
-
SSDEEP
24576:/6WVT6WMaQh/6KzmAiWQm5ZZBLvcfpHUOZsK:/6W4W+y4hv5lLEfpHUOZsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0473ce14f4b020873f4074e66ba1827_JaffaCakes118
Files
-
f0473ce14f4b020873f4074e66ba1827_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 596KB - Virtual size: 593KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ