Static task
static1
Behavioral task
behavioral1
Sample
572cfe24f33fe0fd729f655b5993865b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
572cfe24f33fe0fd729f655b5993865b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
572cfe24f33fe0fd729f655b5993865b_JaffaCakes118
-
Size
308KB
-
MD5
572cfe24f33fe0fd729f655b5993865b
-
SHA1
6c2cf2a0fcda8139b8e725954ba67c305105853f
-
SHA256
1651d452ede82fa5ca2158268b11457453bc7f4901e6c9110479aa37f1184a08
-
SHA512
3fbc1e7cbdadfbd05f9872fae4c7de09f735722ea55141f06994ff192f52914ac45b8a1949af85d72b12802738c0f4f2ad2675d46f7d3d264c10a1d1b1157644
-
SSDEEP
6144:n9UfckO5nFqEanRr7JcfoMegNEp6zPHdBR4LHKc5am9vg3j6UQSZjeL0CZg8Vz:9NkOHqEGRcoMegNI6J74zdvgvF01Vz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 572cfe24f33fe0fd729f655b5993865b_JaffaCakes118
Files
-
572cfe24f33fe0fd729f655b5993865b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�fE0 Size: - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�fE1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�fE2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE