Static task
static1
Behavioral task
behavioral1
Sample
270ed0acb506d3d2b35e63d61dcc2b35_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
270ed0acb506d3d2b35e63d61dcc2b35_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
270ed0acb506d3d2b35e63d61dcc2b35_JaffaCakes118
-
Size
97KB
-
MD5
270ed0acb506d3d2b35e63d61dcc2b35
-
SHA1
ceeef9451be013290ca0cea8c1829800341f5c48
-
SHA256
f0b59467e37b1e01b62b9e26949f911a1c7b9a4ba6856695a10b0eb50ecca3dc
-
SHA512
4b2953eff196aa39f0c6116908e2e1c8aacf0ccfabc9bb82601d4ae7e777c2c38524e74c320696d6c772f8d26ef91698dc85698cd850efe772d04d55222d68cc
-
SSDEEP
1536:lQ7gaxsUaaEqroYjXwVJ95RNe+4c1WKoeSc5AlIo7BdqGsarUsAo6QFqNN/js:egUXE6Dwjfe+4c1WKoeSc2vsarUCqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 270ed0acb506d3d2b35e63d61dcc2b35_JaffaCakes118
Files
-
270ed0acb506d3d2b35e63d61dcc2b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
W0N Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XlkMZ8 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE