Static task
static1
Behavioral task
behavioral1
Sample
ccf86ee7ff165ae6900e80e41b6fe787_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ccf86ee7ff165ae6900e80e41b6fe787_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ccf86ee7ff165ae6900e80e41b6fe787_JaffaCakes118
-
Size
184KB
-
MD5
ccf86ee7ff165ae6900e80e41b6fe787
-
SHA1
bce8096b9eb402d4d104a61ae89bb327871713a7
-
SHA256
56e1e03f0b6ca30410a8fa93a625fa1d61d5339e921eea41275b280ac5df82c7
-
SHA512
54e034d63c97e7248268ea2b7ce67c5fcb78949a377b6106953d9152d24977553e50363a9c0b073df7e428fff54cff60f46ba51d2a6db0944efd33dda6d530a0
-
SSDEEP
3072:PSIMoT+PFJA0NOj4ddxsY8FN9pM6SufIiDyx3xP9pNlPvyF1:PSvocm0NXdjsY8nQDJNlPvyF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccf86ee7ff165ae6900e80e41b6fe787_JaffaCakes118
Files
-
ccf86ee7ff165ae6900e80e41b6fe787_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ