Static task
static1
Behavioral task
behavioral1
Sample
f2b211ffe6e5329e08b5fe0a9c011d9f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2b211ffe6e5329e08b5fe0a9c011d9f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f2b211ffe6e5329e08b5fe0a9c011d9f_JaffaCakes118
-
Size
385KB
-
MD5
f2b211ffe6e5329e08b5fe0a9c011d9f
-
SHA1
2df88d70b66b4a89f7497a2c4341080511aa551d
-
SHA256
d3f00688d3a4e55f83905d2431c8e00598c50596f25796288c1d06434d217466
-
SHA512
71f1b823e75eee4ecba922591d7edb5a7c5b7cc9fa7deea85b2256666325bfa556aba632084ca499fa736c88b5f17d89b13294a1751408bbcc1263669fd3a29c
-
SSDEEP
6144:6sP9kc6YVBDfQ1izJ+Kx52irkd2xkXGfgsF5ocDKwHwxS9B:6sP9gmloitV22xusgsF5V5r9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2b211ffe6e5329e08b5fe0a9c011d9f_JaffaCakes118
Files
-
f2b211ffe6e5329e08b5fe0a9c011d9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ