Static task
static1
Behavioral task
behavioral1
Sample
120cc6f39f70128343df6a1ea3b1aa56_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
120cc6f39f70128343df6a1ea3b1aa56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
120cc6f39f70128343df6a1ea3b1aa56_JaffaCakes118
-
Size
199KB
-
MD5
120cc6f39f70128343df6a1ea3b1aa56
-
SHA1
c037bfd4ec8d5e794d406a282c5e5ca11101649a
-
SHA256
af80210076d4074ab5e483002f72b66ad674c797ef98e19a5488f5e03b6ebde9
-
SHA512
58caa2419bc694087ae488946bf4e2d036df1412bcd8aa39be713559d7c4129467878dfbb30a183eb6295d62eb48e60733099996a844024ae1c93891a81f142c
-
SSDEEP
6144:SDQ3C+e8C8JmneqPkZKKekD5KxEEll8JyWdVHyHtn8:AIzrfikZKYoxEkKP5y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 120cc6f39f70128343df6a1ea3b1aa56_JaffaCakes118
Files
-
120cc6f39f70128343df6a1ea3b1aa56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE