Static task
static1
Behavioral task
behavioral1
Sample
2601353c9627fc6eace8d0006152d043_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2601353c9627fc6eace8d0006152d043_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2601353c9627fc6eace8d0006152d043_JaffaCakes118
-
Size
1.5MB
-
MD5
2601353c9627fc6eace8d0006152d043
-
SHA1
79ee20c441371d46c95bd3a118785903381556b8
-
SHA256
7577bebb436291ba7fa02bc938755c7b575176b5b753c902f84d551b140255ae
-
SHA512
3d6ae496294fdde394a958e74c32f3c800ba33d8406d636f51d90b9762d15a4a0ff756b5a3b42af13b3ea1b791d2637f7372b09ed44a4812b429950efe4463c6
-
SSDEEP
49152:DBIRJDChUbXycTM1IvatpBckbgiM+9CG:DEDcUbXw1gatpBvn9D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2601353c9627fc6eace8d0006152d043_JaffaCakes118
Files
-
2601353c9627fc6eace8d0006152d043_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 716KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ