Static task
static1
Behavioral task
behavioral1
Sample
f223dcfd54dbaf1316a8fda37001bc77_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f223dcfd54dbaf1316a8fda37001bc77_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f223dcfd54dbaf1316a8fda37001bc77_JaffaCakes118
-
Size
3.2MB
-
MD5
f223dcfd54dbaf1316a8fda37001bc77
-
SHA1
72031dfb7e05bae0a5d640fb0f846832be9f8838
-
SHA256
d7ffd5a0c6ff74a704499d5ac5497ec97919f9efe2da6849abe12e23be9ac6c7
-
SHA512
c69faa5059c611545df5a445b99ebf79f560634fccb58c0edadda68ab765f9ef7feadd2d9de02c49cdec5a11bc7a012d6225ad75c7ce81ee4b49cf4c0ae4eb0d
-
SSDEEP
49152:bPerQZbd2OerQZbd2OerQZbd2OerQZbd2OerQZbd24S8r:KrQZorQZorQZorQZorQZx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f223dcfd54dbaf1316a8fda37001bc77_JaffaCakes118
Files
-
f223dcfd54dbaf1316a8fda37001bc77_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ