Static task
static1
Behavioral task
behavioral1
Sample
1257ac1a3d179102f814a8bbe0f9a716_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1257ac1a3d179102f814a8bbe0f9a716_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1257ac1a3d179102f814a8bbe0f9a716_JaffaCakes118
-
Size
29KB
-
MD5
1257ac1a3d179102f814a8bbe0f9a716
-
SHA1
5e1d36e96e88bb6f17aa705ec2310c5522450a61
-
SHA256
96ed99399435a598198fbb2aa4cd41df68bdcebaf2669a140caad465ca218629
-
SHA512
67544d66deb59245dc29a9b60d97c9da4a142bc0c0713c7957e78337a7e4df2dafa7ad985ca6f2042da9be1127d94b2ac7f4c0c4e3adcd162cb7c35fab5bc25d
-
SSDEEP
768:06MmIPmFfdUrMgirNT4XU3Edy+DW+Klc8doZabaP4R:fIg+rMgCTicynDW+dlZabaAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1257ac1a3d179102f814a8bbe0f9a716_JaffaCakes118
Files
-
1257ac1a3d179102f814a8bbe0f9a716_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE