Static task
static1
Behavioral task
behavioral1
Sample
f3e3092aa180e7ca4a6a96776eb79594_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3e3092aa180e7ca4a6a96776eb79594_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3e3092aa180e7ca4a6a96776eb79594_JaffaCakes118
-
Size
11KB
-
MD5
f3e3092aa180e7ca4a6a96776eb79594
-
SHA1
679ea720990e51f17b7f9328e2e3087ef0143fec
-
SHA256
6c664ca81aaabdf8c598c1a1a9c79517ea7cc6af904db5399dae93570f2babee
-
SHA512
42d904d25ec57b0b44ae485339460c2c75159c9ef7e182821d0a726e0f5c984c34b2f6cfada1f2a8670b985f6dbb1209b75df28478a7cf268929f17ec05468e0
-
SSDEEP
192:I4kd4IC9qJnqsAWibYcujgfDXrE0vQIhDyCW6ZA:I4f/M9LAWWYcujs7b7DyMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3e3092aa180e7ca4a6a96776eb79594_JaffaCakes118
Files
-
f3e3092aa180e7ca4a6a96776eb79594_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE