Static task
static1
Behavioral task
behavioral1
Sample
11032b3c6a3687c72da7e855223c573e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11032b3c6a3687c72da7e855223c573e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11032b3c6a3687c72da7e855223c573e_JaffaCakes118
-
Size
1.0MB
-
MD5
11032b3c6a3687c72da7e855223c573e
-
SHA1
7fc8e141c72112a7e695a432c53fbde5224e120d
-
SHA256
62bba795854c45c567472088b68bb0a9ac4eb0d676361cb92e8ee3e95891b843
-
SHA512
618c4e8379a82d85d040f852136197a5a44546eea751e4f902f82c9d7689cfad4e11a1f3357a945c9e8b6ef5a789afd1806d43baf9eae0b557e3a354d8d57f90
-
SSDEEP
12288:oqlBnThjslZ4sAbSZFc8O0s39N8nHZAEVJCiV6h0ZDoF2QRLB688515+pV/qMGEi:ZLdslZ4sATl9mHr6heqxR2MGE9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11032b3c6a3687c72da7e855223c573e_JaffaCakes118
Files
-
11032b3c6a3687c72da7e855223c573e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PopSky Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Azrael Size: 980KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE