Static task
static1
Behavioral task
behavioral1
Sample
f183cc0d7362c749b1f70e7561f0a282_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f183cc0d7362c749b1f70e7561f0a282_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f183cc0d7362c749b1f70e7561f0a282_JaffaCakes118
-
Size
114KB
-
MD5
f183cc0d7362c749b1f70e7561f0a282
-
SHA1
59e48ea750617b06f6b20d324d1ea5a770c392d7
-
SHA256
dd2c931874b468e95d9d9218c6f4deb368bb5801b5196a213a770af94b3494bc
-
SHA512
27dbfa23033b9c7b644216eb8e3fd9a94b2371127e76eec7f6e4a4574a2cfa63c7ca59eaa065dbcfd72a15f77f451ccee546b4dde7eeb105c3c7f03371c1f33c
-
SSDEEP
1536:hxSTHFgw1fcR5nGgwb8c5BXYHVW/sn0cdCNnSN8doFVw3yCzNbvlCrJa4IKXio9q:hEkV0Yc52Ek0cdRNxmzWFaaXiixCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f183cc0d7362c749b1f70e7561f0a282_JaffaCakes118
Files
-
f183cc0d7362c749b1f70e7561f0a282_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE