Static task
static1
Behavioral task
behavioral1
Sample
f397d3843fda06c9261855d08ab47067_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f397d3843fda06c9261855d08ab47067_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f397d3843fda06c9261855d08ab47067_JaffaCakes118
-
Size
22KB
-
MD5
f397d3843fda06c9261855d08ab47067
-
SHA1
eb0fc03ecf091bdb8d942e5f5b89302210f521d2
-
SHA256
73f32255e532af8c14d76add5292ecaf4402f6a8940ea69e0a45b18c9dfd458d
-
SHA512
ff7dd3ca8c82b379fdbaafe143fef1ca254191c540feb4678eb3e64978ae4541a17252efbba490f53d754213c5e8d5a3a704126f07c4ebf6b3aba9783f88f24a
-
SSDEEP
384:C9OiYbrkbpltSPZHqi6XFXcOU0usA76/mm8+kqLPtr03G/FPIe25REJ:0YbAbXYfsXcN0u6OvqLl03G9aQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f397d3843fda06c9261855d08ab47067_JaffaCakes118
Files
-
f397d3843fda06c9261855d08ab47067_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE