Static task
static1
Behavioral task
behavioral1
Sample
1456ceac1e52b8b2c9537a3d950efc4b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1456ceac1e52b8b2c9537a3d950efc4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1456ceac1e52b8b2c9537a3d950efc4b_JaffaCakes118
-
Size
320KB
-
MD5
1456ceac1e52b8b2c9537a3d950efc4b
-
SHA1
0861935afc86222ee6e6c60e48e4eedc3c198cb5
-
SHA256
a33f045e677021145dc3b248b9226b9d02a878562f81cba7c626f9999f1dc3be
-
SHA512
39a75d322db1b27955f83035918676792765a7275dda82d8ee36e414b9a0d55bedc2f12f960ec87963942d9dd35ea21635216d8d2192f42ccd60266e0f92fa41
-
SSDEEP
6144:pqOGzjg6nCtctYF+drN999Eqhdcdvhzs4wrvrUWdnrITE7EwaaB4VrD6b:plbRctYk39NhdcdKBrvrjnUTEAwGC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1456ceac1e52b8b2c9537a3d950efc4b_JaffaCakes118
Files
-
1456ceac1e52b8b2c9537a3d950efc4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WO90 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WO91 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE