Static task
static1
Behavioral task
behavioral1
Sample
867092596904a7a789080c05e327b1f5_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
867092596904a7a789080c05e327b1f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
867092596904a7a789080c05e327b1f5_JaffaCakes118
-
Size
754KB
-
MD5
867092596904a7a789080c05e327b1f5
-
SHA1
d9c92a5d40af0dce43ba3427060b448e7296f7d1
-
SHA256
0631919250c0213e9c2d9b11d6c23f86984159c47c31625e183f43eea6b39f90
-
SHA512
46a2c3f0d7e80069416a50c06b6749d89c3369d4085bcff6a9345b1f1c7bcbcd24c7aa933dcd82ad8cd5bfbee8e94e0265978b40f9f89f228c8e119ed583c6c7
-
SSDEEP
12288:iJ1fm4weQtqAyniHImjS0V8IynFKqLJ031bF3Z4mxxyTSb56YH8W:+tqkAyncImnKnF1V031bQmXZ16YH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 867092596904a7a789080c05e327b1f5_JaffaCakes118
Files
-
867092596904a7a789080c05e327b1f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 355KB - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE