Static task
static1
Behavioral task
behavioral1
Sample
289ed07cf024d8f1cedde485efdd2193_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
289ed07cf024d8f1cedde485efdd2193_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
289ed07cf024d8f1cedde485efdd2193_JaffaCakes118
-
Size
564KB
-
MD5
289ed07cf024d8f1cedde485efdd2193
-
SHA1
65f17edc9ccdec47ce74d7b1db107acd8c5fd4ed
-
SHA256
1a2d70bec3493d947460ac875a5991134a68a14afd01937d510e8d97c7a158bc
-
SHA512
384861f5d6f0e193a748c4d224b04e59f507825921abb841a7332015d326b128499eb6d2ed43fb73175e0d7c145cee29f377629220a67568d2a70c91387d5668
-
SSDEEP
12288:a/XM4DShe9EcHPLrLZ5AICgkHP3/vmQgKLzvlu2yDk7qAU:aM4DSs9FvzAICgkHjgq3yDk71
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289ed07cf024d8f1cedde485efdd2193_JaffaCakes118
Files
-
289ed07cf024d8f1cedde485efdd2193_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE