Static task
static1
Behavioral task
behavioral1
Sample
2647df902fd05fe4290e9b994a58f90a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2647df902fd05fe4290e9b994a58f90a_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
2647df902fd05fe4290e9b994a58f90a_JaffaCakes118
-
Size
192KB
-
MD5
2647df902fd05fe4290e9b994a58f90a
-
SHA1
ee3e8ed19d08c0529c4df0f8e72f89543d8db3cf
-
SHA256
ffa7c3780d8c07fb6c458bf343fda03578b533edc4bdded19167aed9aa68b364
-
SHA512
f1e090f643e511907e827ae21cff3373f48e3ee39dfa9339878dceb313a0914b8e707776143c95aed49b8884815b54d3ca85696dab2cc92d9183fa1c0f50b63e
-
SSDEEP
3072:4iEpoPcQ2RwQZOj31GlMGJOL4oJLMLefRWtYJzEqf5lHtpFl:4iCo2qQZ81WMGJw40d75lHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2647df902fd05fe4290e9b994a58f90a_JaffaCakes118
Files
-
2647df902fd05fe4290e9b994a58f90a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ