Static task
static1
Behavioral task
behavioral1
Sample
f7129e83d3a961bfe8bc07aaea834e09_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f7129e83d3a961bfe8bc07aaea834e09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f7129e83d3a961bfe8bc07aaea834e09_JaffaCakes118
-
Size
272KB
-
MD5
f7129e83d3a961bfe8bc07aaea834e09
-
SHA1
9ae1dbfb275d1507d907c8beebfb6ac3ee56c14b
-
SHA256
607b246b1410e40e99164f661905a6464f716ad8c7311291a57258a7e5ae0bfd
-
SHA512
8cb31bb7230638d193ac37c6a35fc05e8a9e61264619494ccf3ef9da3d40ca3d87d2e77409b3ae0addd2882612b61ad626ca21b380f4d948871d7e99e6ddf4ee
-
SSDEEP
6144:wcCgeCFhT3Ye77M/E2Z+aBdGGsoozQ9bVxde4a:wRgeCFlYe7I/xZ+u5kgxde4a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7129e83d3a961bfe8bc07aaea834e09_JaffaCakes118
Files
-
f7129e83d3a961bfe8bc07aaea834e09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PL5ZNxOO Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lIfsHTzp Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TvDaKvCK Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
J3J2O74i Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K9ZvGR19 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
J3J2O74i
-
K9ZvGR19
-
TvDaKvCK
-
lIfsHTzp