Static task
static1
Behavioral task
behavioral1
Sample
f4067998134444a5f1db39d4df092b7b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4067998134444a5f1db39d4df092b7b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4067998134444a5f1db39d4df092b7b_JaffaCakes118
-
Size
932KB
-
MD5
f4067998134444a5f1db39d4df092b7b
-
SHA1
56ef0fea588807dffc5ed1c6c37011f868192d7c
-
SHA256
0f4f0e0d6f0ec87351abb3378bfe24c8bad2b0d9e975886bf65c78edd4303290
-
SHA512
fce9d07ba79dc671daddf154bcce857c1991873dbf4b6098b00d95547e14c6d0e73b46a3997a710262e4be961febc2983f1f17109d0755d2dfcf482ebcd0f419
-
SSDEEP
24576:Iq8znXLpOaFpY2GODBdcSjdQwVaU+X2MOEbDiHP:Iq8znXtOaFpYCDjdJX+GMOuDmP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4067998134444a5f1db39d4df092b7b_JaffaCakes118
Files
-
f4067998134444a5f1db39d4df092b7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.fj$r1r Size: 3KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l0b81n Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7nbnqz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z9uf5p Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ec8bdk Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uv6rar Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.p5jl6r Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: - Virtual size: 3.0MB
.tss Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 901KB - Virtual size: 904KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE