Static task
static1
Behavioral task
behavioral1
Sample
f9820051113cb7f621aa77fb5e560460_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9820051113cb7f621aa77fb5e560460_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9820051113cb7f621aa77fb5e560460_JaffaCakes118
-
Size
28KB
-
MD5
f9820051113cb7f621aa77fb5e560460
-
SHA1
1efa371bee5ec300dc8b1a71a9f592a0d775dbba
-
SHA256
c23804ef0721bc00f4a082b619a3a056fb8fc1a0212905b15446322f50989114
-
SHA512
6fc8d06c89e7cd27ebf104368fec5e98a1b5ae30fd44cf63c5beb138cf4e437f802283793889fb7316b0fd5e135d21ebdb9dbebdfd4195889592aa9d56cf24c2
-
SSDEEP
768:YPvJwNIVbPeq1V+GTh+5JLIimbjG6fRRTTF:SXRbjNfRRTTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9820051113cb7f621aa77fb5e560460_JaffaCakes118
Files
-
f9820051113cb7f621aa77fb5e560460_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE