Static task
static1
Behavioral task
behavioral1
Sample
083aba6c98915258a1e8d869e871bbee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
083aba6c98915258a1e8d869e871bbee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
083aba6c98915258a1e8d869e871bbee_JaffaCakes118
-
Size
385KB
-
MD5
083aba6c98915258a1e8d869e871bbee
-
SHA1
de36e437183d74701e60910fb409e068f739675f
-
SHA256
72b6eb0539180ee2d9121e8f4907d1507b9a79468eabcc60fb3659571e8fdad0
-
SHA512
fb575ffd8eab782f9e23a4292ccb0f61098462de647e8b63ac6c3c6f108c016e47673ddd36f6eb437746fb5d9789ea9bfa0afb8b06d114c351dcc246473ee4f3
-
SSDEEP
6144:SbmHQwN0F3EacYJHuPtb194B/iMlLmzjhdVF45kBz23dsDE0/Y3+L75mZnMLoyo3:SbmHCUaEp19IdmRr2eDS+LElu/Ts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 083aba6c98915258a1e8d869e871bbee_JaffaCakes118
Files
-
083aba6c98915258a1e8d869e871bbee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.tsrh0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tsrh1 Size: 369KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tsrh2 Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE