Static task
static1
Behavioral task
behavioral1
Sample
f2c89407486d637789e3ba96b33bb64b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2c89407486d637789e3ba96b33bb64b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2c89407486d637789e3ba96b33bb64b_JaffaCakes118
-
Size
20KB
-
MD5
f2c89407486d637789e3ba96b33bb64b
-
SHA1
532990eb2e44c22a2b85cf7e9d370070747645d7
-
SHA256
55255c53e6fd47761f1f58c1bae95427f85048cea99af0dc77652b69a2d0557c
-
SHA512
c69ee73d4d859731c6d44737d2b2974a9c1042660f6cb4c0e42b14b327225f0f25fc6a274a704d8dccc78c2857ea8fc59e4c330defbaee9567f42b29e2f21c59
-
SSDEEP
384:4a8Q732vDfFnnaQkr09sGpXUDnqhwrNkAy2wAjsRDm1Do4A3waaAdBAaTFAJFVks:4RQ732LtL9sGzhwKAy2wAjsdm1Do4AAp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2c89407486d637789e3ba96b33bb64b_JaffaCakes118
Files
-
f2c89407486d637789e3ba96b33bb64b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
sysring0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sysring1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sysring2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE