Static task
static1
Behavioral task
behavioral1
Sample
f30147d548d073d76422c97643524f73_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f30147d548d073d76422c97643524f73_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f30147d548d073d76422c97643524f73_JaffaCakes118
-
Size
351KB
-
MD5
f30147d548d073d76422c97643524f73
-
SHA1
831483dd68b540c027da6a557b1a6f20d5faf833
-
SHA256
661abb4010a8f94fdcbe7ad67fb3c22de198615cd7c691987bf3b537b188ae33
-
SHA512
cffb57e1a7e999a85aa7fbaf98fb5fc237f703aeb0774fc74ea7c3587965452828a8443330615c7311d8029a6dbfc07225cdb7694da6aa1fd96956a351f26900
-
SSDEEP
6144:HO+TyiE8+aqCjToXVpGOZcWixTmAcThAkZThMTMK:JXEkqeolrix1c60yT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f30147d548d073d76422c97643524f73_JaffaCakes118
Files
-
f30147d548d073d76422c97643524f73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
. Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE