Static task
static1
Behavioral task
behavioral1
Sample
f1b4f3bd7b0fca3c6355b4f5fbdfc362_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1b4f3bd7b0fca3c6355b4f5fbdfc362_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1b4f3bd7b0fca3c6355b4f5fbdfc362_JaffaCakes118
-
Size
20KB
-
MD5
f1b4f3bd7b0fca3c6355b4f5fbdfc362
-
SHA1
a9bfd36bd24b0e39ead12f74efc2acace93f8eb6
-
SHA256
73956d133d6d811b63ca8bebb49a616d0651e2869e2610f74366ad4b998a7c14
-
SHA512
7b5a0274f9efde173469614e8017ea441c5ca2e7cba9ea6769298ca34839bafc9e34c043ec56609902a41ad6f28c934c092b3847d23e9bc32ddcbe7850aea15e
-
SSDEEP
384:26P7DjMhCNRXCgHojgELvgX+Pbo4fSI6zFI+T2CA:RzDeMNFUdLhPGdI+T2CA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1b4f3bd7b0fca3c6355b4f5fbdfc362_JaffaCakes118
Files
-
f1b4f3bd7b0fca3c6355b4f5fbdfc362_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE