Static task
static1
Behavioral task
behavioral1
Sample
f056399fb518f8243ef63f5238566572_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f056399fb518f8243ef63f5238566572_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f056399fb518f8243ef63f5238566572_JaffaCakes118
-
Size
183KB
-
MD5
f056399fb518f8243ef63f5238566572
-
SHA1
999446471e47551ed7c0a32c61d1f31a415e6687
-
SHA256
e295e549c8c090ec179cc6a10ace1341eb85cf22e37cdec294dbd9d7b6a7a65a
-
SHA512
0c2fa07a45af7484677f359fa1c0cccc61c568d0c0ac1495c2a6437c836597d6f9e60bc510387a47d2b69f813eb7a5ce2f3ecf0ec1940f4b06bdb853b44fb247
-
SSDEEP
3072:lKBFFK5HdFJAe////Jfffffd222222222tB1XObM0YdF/V2Pl0C44OdbujWjiyX:lIFstdDfffffW1+bM1F8Pl0C44HWdX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f056399fb518f8243ef63f5238566572_JaffaCakes118
Files
-
f056399fb518f8243ef63f5238566572_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE