Static task
static1
Behavioral task
behavioral1
Sample
cec6fba70599a45c1f487109d8210c57_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cec6fba70599a45c1f487109d8210c57_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
cec6fba70599a45c1f487109d8210c57_JaffaCakes118
-
Size
188KB
-
MD5
cec6fba70599a45c1f487109d8210c57
-
SHA1
a13a97ecb6cc4a1315ea9ba585784e2ffd3c51d5
-
SHA256
e9b7a50a40416754f25e2162b0b0584ca5a84414dab9e823b201bef7a910a4c1
-
SHA512
66fe2f72b03c604b306b59416de6fafc523b1582eabaa4dd22237f7045496899ff0cb379c650e0f54e3d1774870ed30842d75107d27fac7c74cf9220eda7935f
-
SSDEEP
3072:mdmVoieiwc0TkOjMqD1/X7ybAGAJ9npiIxdi0jgilv1pFZ:mdIo/pTk3qR/X7LpbQilv1pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cec6fba70599a45c1f487109d8210c57_JaffaCakes118
Files
-
cec6fba70599a45c1f487109d8210c57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ