Static task
static1
Behavioral task
behavioral1
Sample
12956b17be6d6a655da6787c6811fc16_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12956b17be6d6a655da6787c6811fc16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12956b17be6d6a655da6787c6811fc16_JaffaCakes118
-
Size
2.3MB
-
MD5
12956b17be6d6a655da6787c6811fc16
-
SHA1
213482e4ad41fa12fc73ea82392135849fdfa458
-
SHA256
26ac3af425c86612b9289db47b4f013bc831235452e3af312ebfa8a44217feb8
-
SHA512
63eea6094250d387087f442c283d8ff0a1b267a2004cfe2e5ee37faf85cb25cbeb9a4cfa48c10ee364e5a5d5aac14ab8253cec7175e96c2e1c3a60422c55891b
-
SSDEEP
49152:haKhNV4dX4G9P15eC2i6HovbNAkpE3tSX5xYTXl/1Xdwh3bs+JjRT/VSbh5ISCI+:EKhNV4dI+5h96HoDNAkpE3tSX5xY7ltU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12956b17be6d6a655da6787c6811fc16_JaffaCakes118
Files
-
12956b17be6d6a655da6787c6811fc16_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�o|�@��� Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��Ѐ?IQ` Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 583KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE