Static task
static1
Behavioral task
behavioral1
Sample
268b9397398ff4d603c7921ebbdac232_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
268b9397398ff4d603c7921ebbdac232_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
268b9397398ff4d603c7921ebbdac232_JaffaCakes118
-
Size
989KB
-
MD5
268b9397398ff4d603c7921ebbdac232
-
SHA1
6fc57687c7e993be9fb55d5063302b4344837e3d
-
SHA256
1e346e5270b34c05391c310516078576686f7b8c4d6b74ec8a692a604c8cdd72
-
SHA512
52ce45acb7ebe0f24bcbbaabbc706678c4f04fd736c783b8976c20f622a9ef85a20a88f8ac7a3f858cf42dbcc42af98b34d5f7ffbb3793ff4efa225b845bd5fc
-
SSDEEP
12288:wb/k+Ya3tUKm5rszigTMOU008Ac3QzfcOq9ZX1aPguTqXgEtraHRHKdUVK8ckjyJ:j+Ya9vmsOgccTZfjOUdUVK9kH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 268b9397398ff4d603c7921ebbdac232_JaffaCakes118
Files
-
268b9397398ff4d603c7921ebbdac232_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Firewall Size: 940KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE