Static task
static1
Behavioral task
behavioral1
Sample
d90118b434f3c89bc5eedac9ed5757b1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d90118b434f3c89bc5eedac9ed5757b1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d90118b434f3c89bc5eedac9ed5757b1_JaffaCakes118
-
Size
188KB
-
MD5
d90118b434f3c89bc5eedac9ed5757b1
-
SHA1
958aecb7ab8f293f80d337fcea73faeba5119ec0
-
SHA256
61230819e5c29346c4b6e975b3a92f868b3ee64e11966b5a70061fb7ffffa2eb
-
SHA512
4e57eafe2473aa6f8913c3b9457bc0a11159a3a9dabf838bb1c04c9e907674f8509bc374dbd8efb163269948069acb8e30c71cc4dc2fab6f23d164c526c563e0
-
SSDEEP
3072:Fdy/oi2exc0TkOjMqD1/9rMb+GAJ2Fpb4xde0jQilv1pF9:FdSompTk3qR/9rw/acilv1pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d90118b434f3c89bc5eedac9ed5757b1_JaffaCakes118
Files
-
d90118b434f3c89bc5eedac9ed5757b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ