Static task
static1
Behavioral task
behavioral1
Sample
f0cfc4d904fa8e6e9a84f99629c8dfd9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0cfc4d904fa8e6e9a84f99629c8dfd9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0cfc4d904fa8e6e9a84f99629c8dfd9_JaffaCakes118
-
Size
57KB
-
MD5
f0cfc4d904fa8e6e9a84f99629c8dfd9
-
SHA1
64c5f6caab19dd1cd3eb5fd4b4923fc1cf5f63c8
-
SHA256
fda6b600e6f113fe66694fd32f22e1461c2af7a8e7b3cf3ecdf9d4295d3a4285
-
SHA512
4d58a6654e66218f584cd3ce0dc2776b2cbb8345ba48f9114f2962a657921fa6c2662aecc6a398172102152f6a60f0292b0a18f2a9d2b4896a804a2ba856cd90
-
SSDEEP
1536:FA97NW7PD/Uz0WB9J7XsYSbNvPAO7MeEi8BKJr7IwiLp:FA97wLD+9J7rSbNwEMA88JAwi1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0cfc4d904fa8e6e9a84f99629c8dfd9_JaffaCakes118
Files
-
f0cfc4d904fa8e6e9a84f99629c8dfd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.data Size: 56KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ