Static task
static1
Behavioral task
behavioral1
Sample
f2be1d6c56f6844eb348e677a3d69c1e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2be1d6c56f6844eb348e677a3d69c1e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2be1d6c56f6844eb348e677a3d69c1e_JaffaCakes118
-
Size
4.6MB
-
MD5
f2be1d6c56f6844eb348e677a3d69c1e
-
SHA1
37736ca663a2247ef994a95c68451d378111f217
-
SHA256
351f23acf0a28fdb0f5c7a4b6fa9249e9fbd1f2eff87637700bafe054e0224d2
-
SHA512
e0d557aefee268a578692a15454728b85dd8b36b26720f00f1734c4bdac88ec896fbbfca4c7fddc81c091f4b5268b86013856751d5857ed8597fdcf664140383
-
SSDEEP
98304:GBbOBZOT/ZrGB17iC5ZALw0+AHcToiV+unmsuGKvZTB9Y+eUbuWxft01dVOj:A9riYc0++cdjD8RBbeUbueGX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2be1d6c56f6844eb348e677a3d69c1e_JaffaCakes118
Files
-
f2be1d6c56f6844eb348e677a3d69c1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE