Static task
static1
Behavioral task
behavioral1
Sample
12c315e9d735da5546b4634f8afaac06_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12c315e9d735da5546b4634f8afaac06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12c315e9d735da5546b4634f8afaac06_JaffaCakes118
-
Size
212KB
-
MD5
12c315e9d735da5546b4634f8afaac06
-
SHA1
6b7611edb78bc286a5847508948d959666aaca12
-
SHA256
c0b170a03afba4fe6cdaead15cf06914acfa152f6856fa017e6e415618c93909
-
SHA512
aa88ece23663d64facf026337c3f52895b1cce34985cdc92d2b8669cf5bbc8637f838d91ad8403f7689ba9a178fbcffc2318c3b5c368b2180e594affdd79d738
-
SSDEEP
3072:Kk9sHWhPYy7bwLBKxYpWLjciBB6q0kYgz1OuIaPLxJtfdTeT63fCV+MTM4tf9G6e:Kk9P2y7bGpKc3q8yOjaVJtRxPCV+Mg4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12c315e9d735da5546b4634f8afaac06_JaffaCakes118
Files
-
12c315e9d735da5546b4634f8afaac06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ