Static task
static1
Behavioral task
behavioral1
Sample
f67ea008ffc32c0de90f19870e410642_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f67ea008ffc32c0de90f19870e410642_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f67ea008ffc32c0de90f19870e410642_JaffaCakes118
-
Size
1.5MB
-
MD5
f67ea008ffc32c0de90f19870e410642
-
SHA1
5b9d1ade986786bdc257a986125e85ec4492104d
-
SHA256
074b15ff01e9439000d95d5c5e71a67aa02b32632ceef684cc1b0fa6c090c5af
-
SHA512
9aacc47422ded1e1649f3910a289affda5ee44209ca78bcbad99467769461be718078467005268817b981f26dd2836711a06fbca787856cf1b8bff192cb44cc2
-
SSDEEP
24576:woKUpPpBHUox8o5TwIbdwLUDvBSKB7TCQcb:wOp8+n5PjDXIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f67ea008ffc32c0de90f19870e410642_JaffaCakes118
Files
-
f67ea008ffc32c0de90f19870e410642_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 892KB - Virtual size: 890KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ