Static task
static1
Behavioral task
behavioral1
Sample
141eed8de6797233846a43252017e893_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
141eed8de6797233846a43252017e893_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
141eed8de6797233846a43252017e893_JaffaCakes118
-
Size
910KB
-
MD5
141eed8de6797233846a43252017e893
-
SHA1
f7816260f8462d5a86236431b51179cf1a956153
-
SHA256
fd0f3db78a44d73c177e14d03b2eab4e340b5cd9d354a0f0657f32d55cfabd6e
-
SHA512
ad47018718bd2ded2928d3b1aad98fe05c7ba893f135255b41fffbae017d50d16ed19f75a5a988fd1ca34be2d89e60cb68a64df24c8804c4da90277fb6e0eb55
-
SSDEEP
12288:VdJ1OjIvsbHum0uSlJQqn3CcjczPA29PBBQPo9ZmVUbFvlA+CYiMXt2kaJp8QMWs:psLumA3sXoel/BD5aJfQQB7c7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141eed8de6797233846a43252017e893_JaffaCakes118
Files
-
141eed8de6797233846a43252017e893_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.poxcx Size: 38KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rezun Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vatip Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ