Static task
static1
Behavioral task
behavioral1
Sample
14b2c9679cec814f0e8550b79ca711f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14b2c9679cec814f0e8550b79ca711f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14b2c9679cec814f0e8550b79ca711f4_JaffaCakes118
-
Size
340KB
-
MD5
14b2c9679cec814f0e8550b79ca711f4
-
SHA1
cfaa94c8fb71c2e56f873bbc4def2d6bbd2f1c57
-
SHA256
73f534140449932e63e835fe4e023289ba7039a649bd732219724646d92f432d
-
SHA512
888da8da35ea54b4760f47a99a385b1ad2f1cd21d2f42257924124b27dc29cbb111fd10626ed7d51b1b8342d0c732f8668401f74f01a5393e9ff196b779a3d68
-
SSDEEP
1536:IdY7YkjyrjmjLj9rbmWmcm330mUxb7xFxc8xG0mF3fQ0BI03Me6M6v6S60o313YB:IqrHW1jMLttsc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b2c9679cec814f0e8550b79ca711f4_JaffaCakes118
Files
-
14b2c9679cec814f0e8550b79ca711f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���J^ Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�p����� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE