Static task
static1
Behavioral task
behavioral1
Sample
140b595729660e9502a89b31f5c2df40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
140b595729660e9502a89b31f5c2df40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
140b595729660e9502a89b31f5c2df40_JaffaCakes118
-
Size
23KB
-
MD5
140b595729660e9502a89b31f5c2df40
-
SHA1
d29967db656a6804ddf0364a7bfa774feb4f8f5e
-
SHA256
6e15b4babc1feebe314eda42cf82a9afe798d4b4b913df2e3d9d39621e4bae83
-
SHA512
13d04a974e95e35495fec6f68870499b8d13502df21ae1d08f58f19197902a8973b4b29c52e9d4a6543efaae8d3d200cf857fe7eeeea486d3bc624c9727eee20
-
SSDEEP
384:RsmShEB536E70c1+3YL2tTWl5O1sq4br7NzxXzTcJEt8FrQPL2wNuSYD+Da7RGf+:Rsmt1A4+3YAH1fyr7NzxXz1iZQP7kJi2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140b595729660e9502a89b31f5c2df40_JaffaCakes118
Files
-
140b595729660e9502a89b31f5c2df40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 91KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE