Static task
static1
Behavioral task
behavioral1
Sample
14e895d7d6337627516b8af0e1de4076_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14e895d7d6337627516b8af0e1de4076_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14e895d7d6337627516b8af0e1de4076_JaffaCakes118
-
Size
4KB
-
MD5
14e895d7d6337627516b8af0e1de4076
-
SHA1
a9e13f0ed928420889870aaf5d9310567383ede2
-
SHA256
a9e1a122da7b0beeaf3ca123de4f16597a675d6815e78b67d2e8edd290043ca5
-
SHA512
8ca9138e8c725f92835b6a8a23acb23436f9aa82940ec8519c87d00f41149ee8397c7577576f0ee2021982d2bd3340c4b0c0d15096ddd10128de5abbe589a160
-
SSDEEP
6:idqjvVg3F+X32IZdioY+//FzAYda/4aG6FllYdN/q73QKihQt86EC53r:eyGSGIiytzAYda/DGE/YX/q7QKkaNr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e895d7d6337627516b8af0e1de4076_JaffaCakes118
Files
-
14e895d7d6337627516b8af0e1de4076_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ