Static task
static1
Behavioral task
behavioral1
Sample
f3eee9c1cb839f2484fcfb60ad0e6505_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3eee9c1cb839f2484fcfb60ad0e6505_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3eee9c1cb839f2484fcfb60ad0e6505_JaffaCakes118
-
Size
241KB
-
MD5
f3eee9c1cb839f2484fcfb60ad0e6505
-
SHA1
f88ee5d371523fed5bdcd92972650be565d0fc41
-
SHA256
0eb38e96068cddc0e1303ddd3ecb2684aea53b3d000dabc8d187d050e971eda2
-
SHA512
74a244e6193203724bc79b6cebfe2bc895511fb53e7819f313efbb31aaf12f97c9dbffea2d9f382ea5ca786a8e0a96afe0a142133434644b84a7346401125ea0
-
SSDEEP
6144:1ETZ+Za0BiUEUUnM0zZUnO2HmfrlH5R4PcTipic9ZKL+5iqy:1ETFfXU2z1UnrHmDlj5ipiob5iqy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3eee9c1cb839f2484fcfb60ad0e6505_JaffaCakes118
Files
-
f3eee9c1cb839f2484fcfb60ad0e6505_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ