Static task
static1
Behavioral task
behavioral1
Sample
14f8f720605c09b3a369748aad5d27c9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14f8f720605c09b3a369748aad5d27c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14f8f720605c09b3a369748aad5d27c9_JaffaCakes118
-
Size
36KB
-
MD5
14f8f720605c09b3a369748aad5d27c9
-
SHA1
72cf663157ba748c5b03fe37279ddb3f18d5ecdb
-
SHA256
aa0d6ebb6e7eee1a700ea46da01c843adc6f9203614a083adecdd872feac1f1e
-
SHA512
028b5f6e2904bfca2ce6a7c8e63fd3215f9b4e04034c64c32bbe814df88d1099df63f752fb3ae73af2821cf912c3ff9b2ca370da4d4c3c13f88637b93016f44b
-
SSDEEP
768:vWdoF2O9Cs2auwW9chW8++3Y7dlQDtmUlT+8XIF4WFxTa:qgTx2xwqcVYdW5mUlT+bF1Va
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f8f720605c09b3a369748aad5d27c9_JaffaCakes118
Files
-
14f8f720605c09b3a369748aad5d27c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ