Static task
static1
Behavioral task
behavioral1
Sample
121c5b49224d38608d9f05c64044acff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
121c5b49224d38608d9f05c64044acff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
121c5b49224d38608d9f05c64044acff_JaffaCakes118
-
Size
357KB
-
MD5
121c5b49224d38608d9f05c64044acff
-
SHA1
0698d82395afa3875ea82a61cdb60ea6140d319c
-
SHA256
5ab85df6cb9560578d2f7d41770fe7e3ab9ceb9003679333ab75d026c6658f6c
-
SHA512
794cb5f2cc7cd7dcdb70430610cfd171ce423a90b23cfd78e31eede9ab69eb4272d12594be3de3ec261387c0a93bf4670b6e613cdd3aa3b1b484b7e0845b9c64
-
SSDEEP
6144:zIVgALSi40CsI0V07pefMBe0ZIMxDZV2ruvvQmcasasQ18fQRT+RGNTRVl:82A2i4SngpeUBNZ72moDuT+Oh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 121c5b49224d38608d9f05c64044acff_JaffaCakes118
Files
-
121c5b49224d38608d9f05c64044acff_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
sdfg Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wer Size: 356KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZXCc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE