Static task
static1
Behavioral task
behavioral1
Sample
f1ee3adb9863e18cfff5fe329cd5d151_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f1ee3adb9863e18cfff5fe329cd5d151_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1ee3adb9863e18cfff5fe329cd5d151_JaffaCakes118
-
Size
3.2MB
-
MD5
f1ee3adb9863e18cfff5fe329cd5d151
-
SHA1
d75addbc08ddcd3b59a13ca3ebef1d6f5ccde790
-
SHA256
333330d78b2c8e065110679c89e8751fc8b9ad7dfa4617f6590935046ae5c71b
-
SHA512
6f2c2b631c3322d1b3aebcd08af86c7397aa0ae46e8b9de05604546a029b83dca4c017f4176d44b23d7355585fde6038d48ca8c380d21043b54f67ce9995ed2d
-
SSDEEP
24576:lrIOv7uUdOubPMjiL2HpUsSTuo9GseJdN4APPfKwln3jmQKF6KBEQ/AE4q+sYj4e:+hRMvT59GsW7SamQ2D/bVibE3316R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1ee3adb9863e18cfff5fe329cd5d151_JaffaCakes118
Files
-
f1ee3adb9863e18cfff5fe329cd5d151_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 972KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 265B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ