Static task
static1
Behavioral task
behavioral1
Sample
422d1508f51b743e185c0fcc77149299_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
422d1508f51b743e185c0fcc77149299_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
422d1508f51b743e185c0fcc77149299_JaffaCakes118
-
Size
73KB
-
MD5
422d1508f51b743e185c0fcc77149299
-
SHA1
3ea2ddca4e96c8bd12105145b70ab85486c47267
-
SHA256
125214f08f3565978babbce8b10150dbc3a75f28c44d72363707c3e04aa7fd61
-
SHA512
2c9a7bffe23404eb51ed8a90f95c9f5c12bed6d7211efe7bbd6bfe58ba0fc17e1b82f18c4d34c4fc816afe90af771cb6d09597eab19c138c518a7b354882d6ab
-
SSDEEP
768:8CygqlZmQb1POMXkMrAmjb483gi8SyeWr59C2IeWr/YLHO:MgqlZmQb5LXkMrVjVvyDr5Q2IDr/YC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 422d1508f51b743e185c0fcc77149299_JaffaCakes118
Files
-
422d1508f51b743e185c0fcc77149299_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.CQIHqV Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jncN Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wquAA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE