Static task
static1
Behavioral task
behavioral1
Sample
f3eca7b9e182289ee6a7b5525061d63d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3eca7b9e182289ee6a7b5525061d63d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3eca7b9e182289ee6a7b5525061d63d_JaffaCakes118
-
Size
270KB
-
MD5
f3eca7b9e182289ee6a7b5525061d63d
-
SHA1
927b07f1c3d0f8e6de1e531545b5c521848346d6
-
SHA256
75c182beee8b04175a92a2934f69dbb4252a58065e7ff0e8ced8c81e4efe5ccc
-
SHA512
4249eda4308c40f6c48374c4b4357b9b836f387a153e0a32e8cd6b63db487e01d3f4da042f13cda3f4ba9d0d8ee6ede8b9b295590d2903c9ab9f9ad9a5e14ef6
-
SSDEEP
384:Re+gRknVYe55B+3aKtg3vypZUUJ2CqyHq6yIRo+cQAKZ9ll:Re+Ak+e55BqaQpGUJ2iHnqg9l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3eca7b9e182289ee6a7b5525061d63d_JaffaCakes118
Files
-
f3eca7b9e182289ee6a7b5525061d63d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE