Static task
static1
Behavioral task
behavioral1
Sample
f043f011140028e347aae8c1d7b84ab1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f043f011140028e347aae8c1d7b84ab1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f043f011140028e347aae8c1d7b84ab1_JaffaCakes118
-
Size
23KB
-
MD5
f043f011140028e347aae8c1d7b84ab1
-
SHA1
82fc392e9ae0a94eb020238ff96537e762ce112e
-
SHA256
2a356186eb142af59a151bcd21202664fab48cf5594a76479635f6fed67e0537
-
SHA512
2fcc68bc25e04fc088b2f189b666a96cb671e00889d685dd6cd386df8b592e9fd41aecb4e0fa203129fc11230d919b9bc3af8e1d7532adb5ce9d79a0323dd672
-
SSDEEP
384:T5iV2vDW5Gs0ZakQ9S6PqHpfu4IGZnZztfXIPgvMHHgBlbjGDRifgg3AcrSehnpE:FiV265DHvS627ZztfXQkQQluDR0j3A8U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f043f011140028e347aae8c1d7b84ab1_JaffaCakes118
Files
-
f043f011140028e347aae8c1d7b84ab1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
960 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
961 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
962 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE