Static task
static1
Behavioral task
behavioral1
Sample
f0fa0d01739ba60f9a0fe062e1cc7642_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0fa0d01739ba60f9a0fe062e1cc7642_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0fa0d01739ba60f9a0fe062e1cc7642_JaffaCakes118
-
Size
128KB
-
MD5
f0fa0d01739ba60f9a0fe062e1cc7642
-
SHA1
b77ed0f54e0509db895e21ea28f8e4839aac7447
-
SHA256
e704119099b56c7f84d5bd8fcd561f2865278af6c13a585965fcd064fcb17a4f
-
SHA512
f3d34615c9422903f202b4053dacb0f5740204711b24c99be7146e7f701bff3e9048ec1c9d61d2093f29453bf16b79c98103a0c36b87bd03ae2c4d61537c1f79
-
SSDEEP
3072:2TJVtRFmO0y6ENSmNweq46P8GXkLBgw1NbkMP4Dj7gBgp:29mO0jENSmSeq4tv5bkDj7gB8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0fa0d01739ba60f9a0fe062e1cc7642_JaffaCakes118
Files
-
f0fa0d01739ba60f9a0fe062e1cc7642_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 860KB - Virtual size: 857KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ