Static task
static1
Behavioral task
behavioral1
Sample
f0268ca7b1b14dcf89cf48f0a225d540_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f0268ca7b1b14dcf89cf48f0a225d540_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0268ca7b1b14dcf89cf48f0a225d540_JaffaCakes118
-
Size
65KB
-
MD5
f0268ca7b1b14dcf89cf48f0a225d540
-
SHA1
4a18ee4f2647b4ee83dede0e98a2ecd6f7badd34
-
SHA256
86276316c320503702354db966f8f504c1c5cdc6676e46b271a8dc9133a84a0c
-
SHA512
ef511fd9b0eb4bfe81105cbba9e04b1018be9248a26f1c0616088f68d1494f56cfabad193d05e3c752e7b1fff79196cf5b7427764650c1e1136946cee13f2537
-
SSDEEP
1536:9GYwRAc+f+SmKHueNgVegOo/f5N95XLOb1yI4B/Z3kDIaKCe8SA6ObMMwJNI:9xwR1+LmuueNS1Oo/xH56YpBhUDdKh87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0268ca7b1b14dcf89cf48f0a225d540_JaffaCakes118
Files
-
f0268ca7b1b14dcf89cf48f0a225d540_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ffcq0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffcq1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffcq2 Size: 955B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE