Static task
static1
Behavioral task
behavioral1
Sample
f3f5d98c0cbb009aa86a749c22e80c0a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3f5d98c0cbb009aa86a749c22e80c0a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3f5d98c0cbb009aa86a749c22e80c0a_JaffaCakes118
-
Size
506KB
-
MD5
f3f5d98c0cbb009aa86a749c22e80c0a
-
SHA1
82eb8615903e669dafd1af4fe22126c4254391be
-
SHA256
348b96b4fd8a8844ef82f3e562ac35b887b32d5c2e629973c31cac22bb988915
-
SHA512
04ddb4f0fb29cca9a006c4a96c6f0be84b1ea4cdbc309bb2a64c717cbb8d6538fb3c30df61f22559addc5f756dd1f4c34ce7aec6eff7a564a925e3e29ed86427
-
SSDEEP
12288:QzGXQPJm5yf2w1oJHryAymIPMJb9/MddvoDSJguCj+cLq3olCK6hb27GV14:UGgPJm5bw1krBysFMddRXAN6hlV14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3f5d98c0cbb009aa86a749c22e80c0a_JaffaCakes118
Files
-
f3f5d98c0cbb009aa86a749c22e80c0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ