Static task
static1
Behavioral task
behavioral1
Sample
11aadfe4ffd5f58d8f727f0ffcf532ac_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
11aadfe4ffd5f58d8f727f0ffcf532ac_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
11aadfe4ffd5f58d8f727f0ffcf532ac_JaffaCakes118
-
Size
192KB
-
MD5
11aadfe4ffd5f58d8f727f0ffcf532ac
-
SHA1
5b2b3aa89c8562be552cd493172f441c3c72aa93
-
SHA256
a4d73365d96c45209fdb47e17bbffe7cf0fd6f5896f65ce084230fc08b645b3e
-
SHA512
39c2e1938a3fd97c87e888b549a61967f0a3cfc82dfeef271223248811cc16baae0603002046feb0a5ea9715bbc05ddd525ee55436afb438b554f37e7dc5839f
-
SSDEEP
3072:tXq/oA76NwAUVhT0/cNz/88b6qGLrujfYSfFx7FWWq6lVvM3:tXGoFhuhkcJ/88rAiy6lVvM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11aadfe4ffd5f58d8f727f0ffcf532ac_JaffaCakes118
Files
-
11aadfe4ffd5f58d8f727f0ffcf532ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ