Static task
static1
Behavioral task
behavioral1
Sample
12b794511bb3f41f2cff6e5fc79c3ec9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
12b794511bb3f41f2cff6e5fc79c3ec9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12b794511bb3f41f2cff6e5fc79c3ec9_JaffaCakes118
-
Size
97KB
-
MD5
12b794511bb3f41f2cff6e5fc79c3ec9
-
SHA1
50e67f59fc13500b9446ec620ce96c776fc42b8d
-
SHA256
154586f9cc04e65d7e501890d548218a1d647913f0c5b9f9b9b4d67b76da0136
-
SHA512
40461e0fbf29e5972421435b1f8aa0c533caf067786c42e97ecf7a297b42ac8ec86b5134f02ddec713b835d470178290f370e25e2fbeabd4f80aa870f3a5c448
-
SSDEEP
1536:v4LiqJLTObQpl3ofpVx4A7sR/CSgOfNOFO/BrFvQLVGpL63BuU6M4V:YZubKSpVx9ZSgOFOifaVdxu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b794511bb3f41f2cff6e5fc79c3ec9_JaffaCakes118
Files
-
12b794511bb3f41f2cff6e5fc79c3ec9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE