Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_685a6934800870b6b3243598c2224bc2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_685a6934800870b6b3243598c2224bc2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_685a6934800870b6b3243598c2224bc2
-
Size
548KB
-
MD5
685a6934800870b6b3243598c2224bc2
-
SHA1
c1e41905332747e56ec843d780428b8d7a44eb06
-
SHA256
279b88ff104026c5f4306535d96bb89b7cd643c0d2658ccd3f11fca48383f10f
-
SHA512
d00ef63764b8b49784cef0fe2bc057024d70b00509c0765b5415ceb84ffb6da28e8b11092f1369ee288eaebf7b916e4557d36186e0b08ad0abf510b49cd9ce37
-
SSDEEP
12288:B2FRnA2K/lGRgOUqmq9kR6lhKXx3HfXmo47aZ6LGU:BaJK/cRgOnmq9g6a3/Xmo0s4R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_685a6934800870b6b3243598c2224bc2
Files
-
JaffaCakes118_685a6934800870b6b3243598c2224bc2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 62KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE