Static task
static1
Behavioral task
behavioral1
Sample
098c4c676f804cb916c25495afbfb8ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
098c4c676f804cb916c25495afbfb8ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
098c4c676f804cb916c25495afbfb8ad_JaffaCakes118
-
Size
712KB
-
MD5
098c4c676f804cb916c25495afbfb8ad
-
SHA1
8a4e11847ab1241825abb50273da9fa669ea5349
-
SHA256
c6ca9c729cde7956ad960ce6f229a702479cb67d9196d8754804a64fb854424b
-
SHA512
b96475b712c7b112c6bc2ccdfd83bb8d23be734c3575bd4fed439edcae3d438ca1406a8cc80804e36cb4e970a1947fd3e5676cadb6059e3bc080422285be1f4b
-
SSDEEP
12288:di7Zf+QpJBnBMAH/Uv2SJBN3OrnlLuRQvzDRAfL6l44V0o5nEbl8YVFpgnd2HF58:sY6BH/tS6nFuwDCu44V0tH6d4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098c4c676f804cb916c25495afbfb8ad_JaffaCakes118
Files
-
098c4c676f804cb916c25495afbfb8ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 711KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE