Static task
static1
Behavioral task
behavioral1
Sample
0014f877c910d62494a889f07e8fc928_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0014f877c910d62494a889f07e8fc928_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0014f877c910d62494a889f07e8fc928_JaffaCakes118
-
Size
45KB
-
MD5
0014f877c910d62494a889f07e8fc928
-
SHA1
4166be40674f05c0e30dc2e977e70cf6542d69e7
-
SHA256
bcd5ac3dda26737a323453b53b77d313db9a2bf6db3ce10153804e932e612c10
-
SHA512
73ff406c4a0f8e09fa3f3dde05408ef501df5dfc74701315dff76a9cbcf5f1a1243f55aaa65b65d3472c5564f1f211a988efae1dc1cdae5be187daad25832564
-
SSDEEP
768:xS2sUAYZyV5kLWs5UWUpJfXBw1a0Eh2Mto6BjHN0L35DZ4dyGIqKDvQGeX+6o:M2tAYc85UWU6a0Eh2W/Bj2bZZAIp0X+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0014f877c910d62494a889f07e8fc928_JaffaCakes118
Files
-
0014f877c910d62494a889f07e8fc928_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
weiwen0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
weiwen1 Size: 45KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE