Static task
static1
Behavioral task
behavioral1
Sample
112e3a0673467ce19af939d87069ddc0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
112e3a0673467ce19af939d87069ddc0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
112e3a0673467ce19af939d87069ddc0_JaffaCakes118
-
Size
389KB
-
MD5
112e3a0673467ce19af939d87069ddc0
-
SHA1
3be160135af26da0cb5e14f3935807b2a54e8c07
-
SHA256
749bdd56d643d60ea373ef44fa03fd3e2348e4e519d4809086c3ddcf61852ccc
-
SHA512
61c38a3512b6077eb030e8d57833162b22229e042f9c3b20436e20673c52e723d0cd6f2b4cf9d37c91d07ad014b964ed8788d4890fc5781009e9b189f92aed80
-
SSDEEP
6144:61i65F3e4sZ4CjsLmqJeGujdTcHxAw96UHV80gOxyvpwePTc6IWEOUygpEz:61K4CcAGuxTcHxrk0bxqLcrO1gpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 112e3a0673467ce19af939d87069ddc0_JaffaCakes118
Files
-
112e3a0673467ce19af939d87069ddc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2304.0MB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ