Static task
static1
Behavioral task
behavioral1
Sample
f0fea629f49f533684ede9ebc6f83551_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0fea629f49f533684ede9ebc6f83551_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0fea629f49f533684ede9ebc6f83551_JaffaCakes118
-
Size
1KB
-
MD5
f0fea629f49f533684ede9ebc6f83551
-
SHA1
e7a402b7eb392fb74b804e55c6208ad7925c0306
-
SHA256
3fc969a49c31eaa561e9bfdc49a494e33f22c5fbca2d8a3fd987da75ad5d5b44
-
SHA512
b5b6ce7aeaf105175665e6d8187634a0630780d1ea6546cb670f5f109bc23233f5746ba6924fe2860d965a2f377cf39b6f7d2bf669fd81552ddf095668b1ceb7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0fea629f49f533684ede9ebc6f83551_JaffaCakes118
Files
-
f0fea629f49f533684ede9ebc6f83551_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4096.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ