Static task
static1
Behavioral task
behavioral1
Sample
f0d6b55cea896184a7022a9c6ee6237f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f0d6b55cea896184a7022a9c6ee6237f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0d6b55cea896184a7022a9c6ee6237f_JaffaCakes118
-
Size
79KB
-
MD5
f0d6b55cea896184a7022a9c6ee6237f
-
SHA1
1e3f6c768f4a330204e8ae3e0a6337445fd6b2cf
-
SHA256
c1b7540788106ec61abff90d9ec032226418e1ffd90c7578468e9f5966397fc9
-
SHA512
3fc5a246d8b92883c5d07fb9eb6f44d45bdb1cb8cd262f9bf6d2ac5481736cac2ba5fdf3fc7e0ff0463c6e5a05facb0cf39c6feab1a1b6cce82b4942ac14af4a
-
SSDEEP
1536:FuRHOWAA0J9qOmgjxOqPEYqqmP1xha5JWeBckF5yaK1j:wHOWAA0XWgsk/qqmTha5wUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0d6b55cea896184a7022a9c6ee6237f_JaffaCakes118
Files
-
f0d6b55cea896184a7022a9c6ee6237f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wamy57vh Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
40pcat4h Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE