Static task
static1
Behavioral task
behavioral1
Sample
12537b032b9e98422510aaac3d7c977c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12537b032b9e98422510aaac3d7c977c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12537b032b9e98422510aaac3d7c977c_JaffaCakes118
-
Size
80KB
-
MD5
12537b032b9e98422510aaac3d7c977c
-
SHA1
6e54da6dff3619bee0c37d35ed23ed6774b75456
-
SHA256
1234e075ad0f0357b027d650438abebe79351eafbe9b84f8c682f21cce714c06
-
SHA512
41989d697a476bfc8387af4bb9c9b2e65cd48919ccf6d7733d7c1127a21e1007c24a20f275f4164138b0d4a82c2b3a3744868f8c7f498ac137bdb33dccc80925
-
SSDEEP
1536:dqj3Sk8cAgGtFvOvs370z8XCr8PzNYl/ztqKwxOyCO+uzxQ0at:dqjCkjGtFvO0L0YSr8Pml/pqxH+u9XK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12537b032b9e98422510aaac3d7c977c_JaffaCakes118
Files
-
12537b032b9e98422510aaac3d7c977c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.1MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE