Static task
static1
Behavioral task
behavioral1
Sample
431c1c5cf60c3171d01267b7c1eba6de_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
431c1c5cf60c3171d01267b7c1eba6de_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
431c1c5cf60c3171d01267b7c1eba6de_JaffaCakes118
-
Size
394KB
-
MD5
431c1c5cf60c3171d01267b7c1eba6de
-
SHA1
d5810330d80ab79d3694ad6789bc8f0e1388ee42
-
SHA256
7ec87541bbd8386886cad2cb04276074aaadf6957a2896482bd7428b84c25b71
-
SHA512
1133ce4f56205e9ed05f6e48a92aa2f423ae46dd042033f1b30412440c3ad107d943eb7c478d1371449c28653ee7fff297c6a03d72c39273799c021f0b19015b
-
SSDEEP
6144:Oh03C2Nuy5BgIYS0qR4j3thss9gc/1pViZI5LmXjJoSn+vysASWM/dTGgczXhdjI:TrNTgI30+atCsactpsIAoS+vOZ1xhdkh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 431c1c5cf60c3171d01267b7c1eba6de_JaffaCakes118
Files
-
431c1c5cf60c3171d01267b7c1eba6de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 522KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE