Static task
static1
Behavioral task
behavioral1
Sample
f3f4c56ff3ab4e53b38f011df4b2f05f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3f4c56ff3ab4e53b38f011df4b2f05f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3f4c56ff3ab4e53b38f011df4b2f05f_JaffaCakes118
-
Size
183KB
-
MD5
f3f4c56ff3ab4e53b38f011df4b2f05f
-
SHA1
ce8780a10e392cd45a5520b5dd59ed6722a1e6e1
-
SHA256
e39a90ea4268db9a673a027c8c132c361724ebff05ecf0fc1af00580ae467108
-
SHA512
26e160422b104ce81254e41c938583d2c489ba14bc2e244c1911e6e68f54bf553719ecd1e24d4e2e4920a0af664538ff75d430582e82128d206fb2872c3666ee
-
SSDEEP
3072:EFaIZ0ZWfI9W6fhSyDREAnaquzoD4/E0sT6ALbT0w0iP+8fULVM8Gu:EFa9WfeW6Z5REK1+Q4E0ILLUw0iP+8fE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3f4c56ff3ab4e53b38f011df4b2f05f_JaffaCakes118
Files
-
f3f4c56ff3ab4e53b38f011df4b2f05f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ