Static task
static1
Behavioral task
behavioral1
Sample
11cf68a3e0fa604f40e96fe8159907ea_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11cf68a3e0fa604f40e96fe8159907ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11cf68a3e0fa604f40e96fe8159907ea_JaffaCakes118
-
Size
113KB
-
MD5
11cf68a3e0fa604f40e96fe8159907ea
-
SHA1
a08aaee876dfb628f69703210bda5a59a0291be3
-
SHA256
6378fb5b4c5f440fe4584db1d73a56f29e0c06bda8c4324bc5bec5f12d43a710
-
SHA512
72081fe78dde8e71721325f0756121f55282340de2a06b1c9686a401f2c3efd1b724dec09e96e395de42eba27283fe3978aa5ee2053e3ce5a74c6a8b2dc302b0
-
SSDEEP
1536:8MXGf6tvJQdelr/QF7W/Q5UFQn7xHU+iZ1ZHhZDShce0dxZbORkleJ63Cx9nSftn:YEJQdU9Qxx0+mghcr/ZbOGJS9SOL7ExJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11cf68a3e0fa604f40e96fe8159907ea_JaffaCakes118
Files
-
11cf68a3e0fa604f40e96fe8159907ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 159KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdkovwtl Size: 1001KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gqbjymws Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE