Static task
static1
Behavioral task
behavioral1
Sample
264608de6691017bf4ded09a62e0ee28_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
264608de6691017bf4ded09a62e0ee28_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
264608de6691017bf4ded09a62e0ee28_JaffaCakes118
-
Size
11KB
-
MD5
264608de6691017bf4ded09a62e0ee28
-
SHA1
5d04b6288578ee55953d0aa80b7fb305e63fbc67
-
SHA256
d33c3a2cf339fbc8030b6c3cc39ccdad5088da4dcfd3369b94ffb2239f4b86a4
-
SHA512
04a4439ae4ce6e96193cc3116f2085a2fd255cb438d67fd36c52e96cf9ca58051216dc14127d00e6b3b351370ae3138e5202cf7e018829efbcd7f38d1b74295b
-
SSDEEP
192:nvSpxeOVZha/dWWEN6or9hlUl/g4mGRG888888888888A2Gl8K2V:0Ja/dpM+l/g5y2GeK2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264608de6691017bf4ded09a62e0ee28_JaffaCakes118
Files
-
264608de6691017bf4ded09a62e0ee28_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 829B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ