Static task
static1
Behavioral task
behavioral1
Sample
f40900b29e44cd4b1ce5795b9857eeaa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f40900b29e44cd4b1ce5795b9857eeaa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f40900b29e44cd4b1ce5795b9857eeaa_JaffaCakes118
-
Size
320KB
-
MD5
f40900b29e44cd4b1ce5795b9857eeaa
-
SHA1
5c822df9dccb154f4c403a8d5311b44e571e857e
-
SHA256
435343898e4d4901882888c11650bc4475d88a61de7a588e3ee1212861695b91
-
SHA512
e79215e29a94e2a0996fd0fd5178a51e35dcd3bcd892c7fb06db3c6c3a98067fd1117905285fb1ff97e9926839a608f31d37f10b0b6ede5710c1ba4c5217cd96
-
SSDEEP
768:/3bGGA/nJZSFIS74tdyhK3aC8lQiTZKNJexp3ok5noG57bKh1sC7h/a4ONBbyZ:/ruBZtzdyhCa/wNcbn5WjgBo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f40900b29e44cd4b1ce5795b9857eeaa_JaffaCakes118
Files
-
f40900b29e44cd4b1ce5795b9857eeaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
*���fT� Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�S�Ѣm� Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE