Static task
static1
Behavioral task
behavioral1
Sample
138a1d2390f306001e58fe2d1c852468_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
138a1d2390f306001e58fe2d1c852468_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
138a1d2390f306001e58fe2d1c852468_JaffaCakes118
-
Size
152KB
-
MD5
138a1d2390f306001e58fe2d1c852468
-
SHA1
2501754eb396220f555ef5d9216c2b066a15b21d
-
SHA256
a2722a5ae6e815ffc1d8fec4b33194cfbd0b38e8d758de55fefdfeb24aba836a
-
SHA512
9b9f760ef3e4b7886ace3aa41d10e62fc4dc70c84c0b36fe7a932249f1ee060da10644758ba4068e950953075a4ab57d7b9426a7c68c39573fe0f0823e407858
-
SSDEEP
3072:rdTp9SdS0j1wHoAHBg19U5fr6x7VGwXmix4E/uo9GmgR8D515:xTSdRj1BAhg1Wj6x794E/p4mz51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 138a1d2390f306001e58fe2d1c852468_JaffaCakes118
Files
-
138a1d2390f306001e58fe2d1c852468_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.newIID Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE