Static task
static1
Behavioral task
behavioral1
Sample
011862c33c038d698ab41267ce13c8c7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
011862c33c038d698ab41267ce13c8c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
011862c33c038d698ab41267ce13c8c7_JaffaCakes118
-
Size
116KB
-
MD5
011862c33c038d698ab41267ce13c8c7
-
SHA1
1f39192a49846e051fc25201581bdcb565a2fa1d
-
SHA256
e7c6f535251f1f0190ab89a7c6afa930430ce10bd9bb549c76fee80138633f9a
-
SHA512
63a6006c3b060a58e2474a7555fb6723f779bd540a1e040db830c23023c07d19d274f51d4b4d50186b3a107f76c4dd827eb2fe3b93a60cb63b535aea62fbadfc
-
SSDEEP
3072:K3mTC9elAzMeN6zvONZz2AGu+h+ubmXWsFrc:omToeKzMeNPZCu+h+uqGIr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011862c33c038d698ab41267ce13c8c7_JaffaCakes118
Files
-
011862c33c038d698ab41267ce13c8c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AhA Size: 22B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ