Static task
static1
Behavioral task
behavioral1
Sample
279ca2f8645461e76a5e81fc4748dc9d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
279ca2f8645461e76a5e81fc4748dc9d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
279ca2f8645461e76a5e81fc4748dc9d_JaffaCakes118
-
Size
106KB
-
MD5
279ca2f8645461e76a5e81fc4748dc9d
-
SHA1
7de72b0031c171904c771c2ee7d54e3ad7c90538
-
SHA256
1ea3432efd927afdffe82e7663ae0885738f614c6aeefd161ba26c2a158a37d3
-
SHA512
b4a7a600f849f88a429ecd0176ef029cbcf6a4df51f2358d6da151665837123f9343fa4641b3f03e331abeb2d2f82c3b0988abda9b24bba5cbc21ed3102a631e
-
SSDEEP
1536:zAItsFm5rJUXZGD8cKtdAFW1kn2AnqqUu9ORP0i8C2x8BZTEmkJiMPiyydxR29R5:8ItsFgOZGD8cIR1Q2AFi8Xx8PEtDK8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279ca2f8645461e76a5e81fc4748dc9d_JaffaCakes118
Files
-
279ca2f8645461e76a5e81fc4748dc9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 104KB - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE