Static task
static1
Behavioral task
behavioral1
Sample
098c2981f5274eb5ba0cdbded1b5d777_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
098c2981f5274eb5ba0cdbded1b5d777_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
098c2981f5274eb5ba0cdbded1b5d777_JaffaCakes118
-
Size
323KB
-
MD5
098c2981f5274eb5ba0cdbded1b5d777
-
SHA1
3ccf8e172af7ba77085fcde379358776c8cc813a
-
SHA256
d34a8b0786e6c8a37b969f9db11db791bf3ace73a28f832a0bb3adb8577ede75
-
SHA512
c5bdf2ed17b2fad3288fe1417cc5f787d88af6927ae000cbd3661bd19882736dbcde9b60909c1027145cac43f7401316f1c2c40d3a9c70b9397c659e03a57c30
-
SSDEEP
6144:idI/68Q5c6QHFZlxxN6P2eki8Lp8zX4fvID8io1m2hmBEKvsVRWmL:rZHFZlxjGai8Lp8zMFis06Vj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098c2981f5274eb5ba0cdbded1b5d777_JaffaCakes118
Files
-
098c2981f5274eb5ba0cdbded1b5d777_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gda Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE