Static task
static1
Behavioral task
behavioral1
Sample
f489ca9715ab6260228ab02cb6fde37f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f489ca9715ab6260228ab02cb6fde37f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f489ca9715ab6260228ab02cb6fde37f_JaffaCakes118
-
Size
18KB
-
MD5
f489ca9715ab6260228ab02cb6fde37f
-
SHA1
ff9d3afc7a019a413147558e2b7bd7fa3f2eee3f
-
SHA256
cb03df6e1403005f5665c6366d01bdfa38960d80f0c2d111e62fd0da6e689fe9
-
SHA512
64067f362db004ac48a0b8720beac9cc6ada8dbb70ecd46d5f75e103a4f8bd018118ed3f5b90ba5f9e24aefff49a387d9f6805b515068822687dcbae9596f330
-
SSDEEP
384:/TcLPoTyZSIkNH6IyTRCzwzylT1iGVN319PhTWb:/4rFZSIkNOgzwzkTEGV/hVK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f489ca9715ab6260228ab02cb6fde37f_JaffaCakes118
Files
-
f489ca9715ab6260228ab02cb6fde37f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 883B - Virtual size: 883B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ