Static task
static1
Behavioral task
behavioral1
Sample
1529b01684525f33eb666f6f617440e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1529b01684525f33eb666f6f617440e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1529b01684525f33eb666f6f617440e4_JaffaCakes118
-
Size
254KB
-
MD5
1529b01684525f33eb666f6f617440e4
-
SHA1
93a82a3a1b5b3ddc86feab73b6a077e4d10d2964
-
SHA256
5921e02a3eb6aa6fb0a3dcd3d6c1135723f0fd6afebf48803a5490330d7e6c3b
-
SHA512
b63e41de35e12f8b53edbbb12b250a709dfb2571482a1531d8cd5d80954c263b744482918ff8fd921dc79c0471f46f1a042728d1b87e2f38a41e357238eab2c1
-
SSDEEP
6144:WlKC00mjLhwzxu79QAB8BhXeqzFbnRn50E:WlKKs6QnChX/T50E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1529b01684525f33eb666f6f617440e4_JaffaCakes118
Files
-
1529b01684525f33eb666f6f617440e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pmj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE