Static task
static1
Behavioral task
behavioral1
Sample
02563f76c55b6f606a184f64d0974375_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02563f76c55b6f606a184f64d0974375_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02563f76c55b6f606a184f64d0974375_JaffaCakes118
-
Size
2.9MB
-
MD5
02563f76c55b6f606a184f64d0974375
-
SHA1
be4726e7b74f1b89cd7f7b433b326c490d6809b3
-
SHA256
2cf8921b09d5ab64be7a05f25597f8a44ebe8aafdf59a97677c48d0731f3a48a
-
SHA512
90cd11737f4728d25409075ad75c6a7fdfca4bc358b3cc8d6269c94160625cab3bb829dbdbaa359291645530e2ef36613cc626916ce1b7ae0f00e30ae1be7d3c
-
SSDEEP
49152:fHnTyWc8MNFVM84pWrOO53RTqtilrOO53RTqtilLfU7lj4oJdXN0BMOwLloBrug:DcAfWrOO53FrOO53qJdXN0B7+s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02563f76c55b6f606a184f64d0974375_JaffaCakes118
Files
-
02563f76c55b6f606a184f64d0974375_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ