Static task
static1
Behavioral task
behavioral1
Sample
f3a696d053995cfa4dae602ca1f9f47a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3a696d053995cfa4dae602ca1f9f47a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3a696d053995cfa4dae602ca1f9f47a_JaffaCakes118
-
Size
104KB
-
MD5
f3a696d053995cfa4dae602ca1f9f47a
-
SHA1
b1df590954faa6b28451864240754a84de274119
-
SHA256
885199848d3e479ec087b1af3461875b0c25546a6601293c98b266853fa6e69d
-
SHA512
01f504ac981377b55e80387a1a9eddc1ecf429aea32680582dd082b6c4ac9aa0f62ca9e55e1e523602b93d053b0358b8bdc845bf505045419f3e41e8153dfbe9
-
SSDEEP
3072:DLisYo4D2p21+qPlolrMkGcdPMU71YNALrTLHOI+m:DLxYDD2p21+qPlYMjcdk2YArPHFZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3a696d053995cfa4dae602ca1f9f47a_JaffaCakes118
Files
-
f3a696d053995cfa4dae602ca1f9f47a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
bxx Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tcbsdufw Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zdc Size: 827B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE