Static task
static1
Behavioral task
behavioral1
Sample
f08db8428c2fbb7ef0383e8b30d6d3d3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f08db8428c2fbb7ef0383e8b30d6d3d3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f08db8428c2fbb7ef0383e8b30d6d3d3_JaffaCakes118
-
Size
84KB
-
MD5
f08db8428c2fbb7ef0383e8b30d6d3d3
-
SHA1
5aa4e4c63733720bebd839685941fbfaf090a024
-
SHA256
4573a94c9e07e307e4337052c877de3f9a81503a24e786dbf4974b9b4e683fd2
-
SHA512
775b85d8973b1f43f0a5f6daacd19ee938c8db2ea71d36b86a5d811ba4a92d79951dbf0a2f54957d375fea61ab0c6a0a6c631f61599e2d5897fcecd8fa62663b
-
SSDEEP
1536:GQku58OnkNAGk4Uhqr1tdcqdGCPhm/2B1k:GQku58OnkNAGk4Uhqr1tdcqdGCPI/2Xk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f08db8428c2fbb7ef0383e8b30d6d3d3_JaffaCakes118
Files
-
f08db8428c2fbb7ef0383e8b30d6d3d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ