Static task
static1
Behavioral task
behavioral1
Sample
1044fb60baed1a1122db5f5c3d460131_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1044fb60baed1a1122db5f5c3d460131_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1044fb60baed1a1122db5f5c3d460131_JaffaCakes118
-
Size
28KB
-
MD5
1044fb60baed1a1122db5f5c3d460131
-
SHA1
e5f39f559b51494309a2d24176cd13a5d7ce09a3
-
SHA256
bccc9dfcaea77042f9d0f722ff8f6b176d8c949961d3314f38de4b6ae69310dc
-
SHA512
90b8ebc495ca02dbb46fb166f8fd586f54668d9e5842afe0f2ccc4636312772f52db5794163607c39bb0e576ea740b83be9bd5184131adf5a054b686898763d4
-
SSDEEP
384:tNO9m00jJKp7h2GZxLywvu/Z9ilz884omyBhKfYJGs7ey5UHHXxGx1uIyswD5fHT:tNTYlhlZx2Z9YAyrgBHHXm19yV1hInNS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1044fb60baed1a1122db5f5c3d460131_JaffaCakes118
Files
-
1044fb60baed1a1122db5f5c3d460131_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 312KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE