Static task
static1
Behavioral task
behavioral1
Sample
089f390a9b3b40c4d3502fd2570c2903_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
089f390a9b3b40c4d3502fd2570c2903_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
089f390a9b3b40c4d3502fd2570c2903_JaffaCakes118
-
Size
48KB
-
MD5
089f390a9b3b40c4d3502fd2570c2903
-
SHA1
38f9f305412ceddcd1ef72c3cc5852c798e54c0b
-
SHA256
e376443ff237c363d17907cac3da0095a5713c6ed08afccddb5df3389dcdf5c6
-
SHA512
1c188919c9727557ff2e634f3686809392d71a9e6e52454cbdfecc8ab954436a674dab450e070f9b0f73ae025c0a1ada92f48ea3a4cfcb7533565189f9fbb10e
-
SSDEEP
768:oVXzYXB7lfpnHztXdLVXzYXBZEg2u09WIN9idYQR:oVEnT3LVEmY0UYQR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089f390a9b3b40c4d3502fd2570c2903_JaffaCakes118
Files
-
089f390a9b3b40c4d3502fd2570c2903_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.PACKMAN Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE