Static task
static1
Behavioral task
behavioral1
Sample
2595c73e4abe9c0483dd4f935fecff58_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2595c73e4abe9c0483dd4f935fecff58_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2595c73e4abe9c0483dd4f935fecff58_JaffaCakes118
-
Size
92KB
-
MD5
2595c73e4abe9c0483dd4f935fecff58
-
SHA1
63126e970053b3101d47ae22d0d6d5b7d3726f49
-
SHA256
c933f7e095e489a14b264e12a0955445d0f252b228fddb65b28865536d323af2
-
SHA512
ec9d1bff19338991ff8f9caac99dab6616a821adbc548aa25792cca197f2854349c285877374414cb35eeb91b1d188dd903eb9fbd1f565a7ab9441d00d229423
-
SSDEEP
1536:dYobJ8KNzn17Y67e6dn2u9Dgw/CEMYA7rx1QSaZwEU0b5asH+S/FhXY43+:dzndYGe6dn2u9DlCJYAHxYaEUi55A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2595c73e4abe9c0483dd4f935fecff58_JaffaCakes118
Files
-
2595c73e4abe9c0483dd4f935fecff58_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dadsasaf Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
adssdada Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdassdsd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
asadssad Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE