Static task
static1
Behavioral task
behavioral1
Sample
1256a5c22da0326da802546c377721d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1256a5c22da0326da802546c377721d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1256a5c22da0326da802546c377721d2_JaffaCakes118
-
Size
200KB
-
MD5
1256a5c22da0326da802546c377721d2
-
SHA1
dc2b5fa8961ed7c307ee4f17f2d2d1308c2e662c
-
SHA256
6cc106801ad99781ea45dfd31be0f76477aa3ad323f9f492f7df0ee07796824c
-
SHA512
d849a8ab05117037c0e006d8a797b0bed82630b7d22c46d88b213810fbdc03a8596813b64df971c65c68016b9d82a5df68e69bde524953bba1ec3ea87d55db4c
-
SSDEEP
3072:8W9RgkSjLZs2czI+lFZ8W+ZlThajecSPR0GIXMidQz312KdprgV9f4ZB8:1RgkQZs2cz3B8W+b0jef1SNzAk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1256a5c22da0326da802546c377721d2_JaffaCakes118
Files
-
1256a5c22da0326da802546c377721d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 584KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ