Static task
static1
Behavioral task
behavioral1
Sample
014683bc4b4351a72b86aa66201b0794_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
014683bc4b4351a72b86aa66201b0794_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
014683bc4b4351a72b86aa66201b0794_JaffaCakes118
-
Size
1.5MB
-
MD5
014683bc4b4351a72b86aa66201b0794
-
SHA1
9a6fb33430a0e2887b52d443867f74ad266ba7a4
-
SHA256
dc6e45e410cdc01853dbb1bccbd5ab8627fe67e085686c8a6b6d41b2cc3a5950
-
SHA512
356072430b682fe66458d93f15eb7696c3705a0f8460627895759ce054b5c036e900494c8335148386a2ad19e7f99c173df9200b0dba16bfcf574cfe93e4b2d2
-
SSDEEP
24576:VUmIrTm1WBztX1Oig3WNMRNhMoJf9XrZ2ejNrtPxlffMedWvXZX3X0zOIuPTci:VUtC1YrOrTXrAsNrtPopvpX0A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 014683bc4b4351a72b86aa66201b0794_JaffaCakes118
Files
-
014683bc4b4351a72b86aa66201b0794_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE