Static task
static1
Behavioral task
behavioral1
Sample
f9c6bcde89d094335930cfd504d25187_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9c6bcde89d094335930cfd504d25187_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f9c6bcde89d094335930cfd504d25187_JaffaCakes118
-
Size
17KB
-
MD5
f9c6bcde89d094335930cfd504d25187
-
SHA1
bba2f88081b973583e524baf0dbe4ff4185a0106
-
SHA256
f67891e91a7c77620d3de0fd0ef8c8f2e5f2a30915a9db8c2f4f7f636e710369
-
SHA512
1e943874147ac244f3e3c059c214fad7c751dc773cffbe7c78ad7f7cdb9e81427689a44940c713ad8437741a95122b5b27e62ef418f45ae06542def1b7dbab7c
-
SSDEEP
384:5hysngBLpAGQbbm/MDL2Kpnod4vkHY/e3bQF+KPF2n:5h/yCGQbiaKKe2k93MhPo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9c6bcde89d094335930cfd504d25187_JaffaCakes118
Files
-
f9c6bcde89d094335930cfd504d25187_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE