Static task
static1
Behavioral task
behavioral1
Sample
f050a5f96e10f61276de66aa2e84d2c7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f050a5f96e10f61276de66aa2e84d2c7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f050a5f96e10f61276de66aa2e84d2c7_JaffaCakes118
-
Size
29KB
-
MD5
f050a5f96e10f61276de66aa2e84d2c7
-
SHA1
abaa71faf1401f6d2bbfda0a589d59478d0426b2
-
SHA256
e78b39beefd4c1a4a05f7d9fed983569a4e3bc24c45684be405aaf5e5b2f493b
-
SHA512
0f1d9e3a38af18dfb76206798cf4197e8a0db6b1ed14a579309f11f338a312e84c036a45548e77a33b486292cd693821b3174af7719a3b72307f4c0c0f9c8114
-
SSDEEP
768:2kDH3m1AYITyKlmBV/K+fATyJz5/Z1QC:/S1TIoz/NAA7KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f050a5f96e10f61276de66aa2e84d2c7_JaffaCakes118
Files
-
f050a5f96e10f61276de66aa2e84d2c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��[��R�@ Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e����XQ� Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE