Static task
static1
Behavioral task
behavioral1
Sample
f4188ffe3f64bc7c7835c71fc6e3f212_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4188ffe3f64bc7c7835c71fc6e3f212_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4188ffe3f64bc7c7835c71fc6e3f212_JaffaCakes118
-
Size
104KB
-
MD5
f4188ffe3f64bc7c7835c71fc6e3f212
-
SHA1
e5bfa9b15c8a23c1f9b4dfb7fc5cd79b0353337e
-
SHA256
a545c0f6f57c74f97429ddb5fa9a8b7f44de5e2d29f168580e7a274577389378
-
SHA512
d90e14586bf5cefbb96a654285a8db16f49d8939806e627ab050a9088a44ecd4f379cd4343aa1ed1d86d83335b6a66d688c50a793ca194e4651f238e9c7f3095
-
SSDEEP
1536:HyKLfPQmBBZaQxWe+g0/EyJ0B58S2V0KkPvDuNUp8xuyVoat:SKT1Z5We+g2EyJ0r8S2sPyOpiuyOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4188ffe3f64bc7c7835c71fc6e3f212_JaffaCakes118
Files
-
f4188ffe3f64bc7c7835c71fc6e3f212_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.akdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 951B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tudata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ