Static task
static1
Behavioral task
behavioral1
Sample
f3c8c7552640955343975207a0e3c82c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f3c8c7552640955343975207a0e3c82c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3c8c7552640955343975207a0e3c82c_JaffaCakes118
-
Size
43KB
-
MD5
f3c8c7552640955343975207a0e3c82c
-
SHA1
0c1fc41817a4bde17d853c464e5725c2b2e9785f
-
SHA256
6338429c37a343845232f0f57a65d2ad80400454e26c1c2be4024d55adc285e4
-
SHA512
66abfd17cfc648598f7c2814309cfdc2e2971f92e5195498f7adc83a41160b7c693965bb2338f07683303cf66bae34e89c49df767824946c6783c565493dac4f
-
SSDEEP
768:uFln4HWsnvpjsWBo1ogzRxyQXIgbjT4XXXnXXXBEXqXXnXaA63/+wNcXXXcXXAXc:ml4HNvNsWwyQXHj0nnnXCqnnqA63/+wq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3c8c7552640955343975207a0e3c82c_JaffaCakes118
Files
-
f3c8c7552640955343975207a0e3c82c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pack Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ