Static task
static1
Behavioral task
behavioral1
Sample
119fe87437f0a67e0911c0d46a1dee6c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
119fe87437f0a67e0911c0d46a1dee6c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
119fe87437f0a67e0911c0d46a1dee6c_JaffaCakes118
-
Size
1.4MB
-
MD5
119fe87437f0a67e0911c0d46a1dee6c
-
SHA1
1b32798ab8f1acf0e368fe553614f9969e804a54
-
SHA256
d8ee9dd324cb9006193b5dc04f2b1ab8b18fc3dae1a7175d09efad96dd60e2bd
-
SHA512
aed56b2a045fb963c3a2fc2155b35235d580cbce7c7bae665d74d75cbed7d6eb1dc60cf7914f9c778c66e2ddb27943e26047fbb36a810d622e3771ec05c04a5a
-
SSDEEP
24576:I4Hsnj4N8E1MhQYxd493yLgrj13rujOtfpRBwCMmQ9Cd0Iz8Xwkpj:TzNfMhrMyM1RtB7/Q9CCIGx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119fe87437f0a67e0911c0d46a1dee6c_JaffaCakes118
Files
-
119fe87437f0a67e0911c0d46a1dee6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE