Static task
static1
Behavioral task
behavioral1
Sample
f3a1153bf07569f7022f19278483498d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3a1153bf07569f7022f19278483498d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3a1153bf07569f7022f19278483498d_JaffaCakes118
-
Size
360KB
-
MD5
f3a1153bf07569f7022f19278483498d
-
SHA1
d547976718b301c42dd538c207521eff4cb19f1a
-
SHA256
5924af5b6ae32cb16871bc4c2838be8606588914760b2f0520786d7d53c911b2
-
SHA512
4adec102586a0bc2662f238169674d03e2a257122a537a794a58b68d784d60fa597c35fa8befcf1b4e617ca63da2d6a97abfefd965b0b9fd770fedfe2c831df8
-
SSDEEP
6144:PZ+PtQjtEIC0b9I7ZgJGNBrzYTi8BR6FYEF8b6cO:hQtQ2IC067GJGNBr0Tt6FchO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3a1153bf07569f7022f19278483498d_JaffaCakes118
Files
-
f3a1153bf07569f7022f19278483498d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.PEX Size: 512B - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEX Size: 359KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE