Static task
static1
Behavioral task
behavioral1
Sample
114480117268b847ef4e3f9f2183e279_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
114480117268b847ef4e3f9f2183e279_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
114480117268b847ef4e3f9f2183e279_JaffaCakes118
-
Size
748KB
-
MD5
114480117268b847ef4e3f9f2183e279
-
SHA1
23bf68cce1f79b998bd7e39340744f66a7276313
-
SHA256
be17c6929f3549d70add560f3ef915b2190cc634ec613d06bf69d1872e53bad8
-
SHA512
b40634a4b4fe2e6df0b7877d409a75c20a7c7432004fa47ca42ac7990160d335e5881468e61c63c14d5dbf8d54b25ba3ab3187eab8b86777a3b484eba7130b38
-
SSDEEP
12288:w5SFkrywR3PYzhGLxe0D8bbfCmqhYZF1tAk7hJEWvgqkXBxwuDZTvUTJ8S2J6jA:xFUR3PYzux7D8bbfCmddtA1qexaTJ8S6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 114480117268b847ef4e3f9f2183e279_JaffaCakes118
Files
-
114480117268b847ef4e3f9f2183e279_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vsghfbva Size: - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NarEBDfT Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
WaPQ9tym Size: 719KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4F5C9Ua8 Size: 704B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NiE0Ghv9 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ