Static task
static1
Behavioral task
behavioral1
Sample
f3ce219e1d422d5e5bca241f1f72ddb2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3ce219e1d422d5e5bca241f1f72ddb2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3ce219e1d422d5e5bca241f1f72ddb2_JaffaCakes118
-
Size
187KB
-
MD5
f3ce219e1d422d5e5bca241f1f72ddb2
-
SHA1
9cb84b87d39cd2562e91314521e2c778584f13dd
-
SHA256
ceea007709d5eeed8a2ccaa1d3e387469181d733a9c5687c73b8a92cd53ebe33
-
SHA512
edf599fca4098f56c95a6365800c0f278584c025cae0c422fbff87df57aa720397f3d0faec5e44de76ae62784e55ad1644db375509b40000ef7a984f65380623
-
SSDEEP
3072:upeUAKvHSWLITcr/gPJvcEpBNk/42XZIwjZTTo7o0Zc1PnPQa:TUfvHd4DBS/4bwZEcP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3ce219e1d422d5e5bca241f1f72ddb2_JaffaCakes118
Files
-
f3ce219e1d422d5e5bca241f1f72ddb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE