Static task
static1
Behavioral task
behavioral1
Sample
451ffd0fc64650e3bf3bdaae81a1af0b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
451ffd0fc64650e3bf3bdaae81a1af0b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
451ffd0fc64650e3bf3bdaae81a1af0b_JaffaCakes118
-
Size
89KB
-
MD5
451ffd0fc64650e3bf3bdaae81a1af0b
-
SHA1
5eb97bcf9ebb6c3fb163cb2fea3cc37ca0ae2469
-
SHA256
6931fa17d30397c907f3864c03922074b37f5d5422006c9241eca3e077014ce9
-
SHA512
371242db4209cdf955ff440d74035c9611c4d9f7d99a3f35ef87cddd8736a2e3cdd1381e70eb4c08b38a65551b78fd68861dc8b626fc223fd5cc17ee01c6da32
-
SSDEEP
1536:OvGMcAVhcnmGQszgWSQeQivVUv5zKzj3d832F9HI+U+Bj2uDPRC7Meuf1aA+WYoS:OtTh8mGQszgWSQzivV2KFF9H/Aew7M5+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 451ffd0fc64650e3bf3bdaae81a1af0b_JaffaCakes118
Files
-
451ffd0fc64650e3bf3bdaae81a1af0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 170KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE