Static task
static1
Behavioral task
behavioral1
Sample
f56d83398c763909b902522e3ba0b934_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f56d83398c763909b902522e3ba0b934_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f56d83398c763909b902522e3ba0b934_JaffaCakes118
-
Size
57KB
-
MD5
f56d83398c763909b902522e3ba0b934
-
SHA1
3a1e9656b1500fd9cf84c93dbdcca49ba5b81f02
-
SHA256
2acea0723f1370d47dcb2950d6b3dfd52907971c2130fb801e76e85c3ab7e8a3
-
SHA512
60dc0a6f1c43908f99b62f4b1fdcd52a699f06c9cf3cdd4f4ef8f2a7a981c754a72dd3bc8425f57390f794521f3ab93ac7c3f24cd3a2353c0cd441fb93a8c185
-
SSDEEP
1536:1CID02exe/wf72qrdol86JaKzGyECMdLSEip:1CIDMR76z4QGyEBdLS/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f56d83398c763909b902522e3ba0b934_JaffaCakes118
Files
-
f56d83398c763909b902522e3ba0b934_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
egc50 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egc51 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egc52 Size: 325B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE