Static task
static1
Behavioral task
behavioral1
Sample
cf51bd68fd053fbd2f5e8b2e5da1e942_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cf51bd68fd053fbd2f5e8b2e5da1e942_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
cf51bd68fd053fbd2f5e8b2e5da1e942_JaffaCakes118
-
Size
192KB
-
MD5
cf51bd68fd053fbd2f5e8b2e5da1e942
-
SHA1
074a39443d031b42589fec2f8a0b549210754010
-
SHA256
b365464b9a32ab8846375e0007554885d83d4f3c532aa35f9142ec2c3e08ed72
-
SHA512
630102355efd7f25600a4f9492dd4ffeeec683a8a105fccbedf31ae412244ca5c011ee50a910bc85311f94c6d09418e8d780d87c7e692ad34559bad06a3b4e3b
-
SSDEEP
3072:yihkoPVyk9wQnOjj8GlEsJOLfhgwMtefzDtYJHE/y5lHtpFl:yi2oveQn48WEsJ7P0G55lHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf51bd68fd053fbd2f5e8b2e5da1e942_JaffaCakes118
Files
-
cf51bd68fd053fbd2f5e8b2e5da1e942_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ