Static task
static1
Behavioral task
behavioral1
Sample
f41b17687cbaf5c77b9edda9460c5f61_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f41b17687cbaf5c77b9edda9460c5f61_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f41b17687cbaf5c77b9edda9460c5f61_JaffaCakes118
-
Size
36KB
-
MD5
f41b17687cbaf5c77b9edda9460c5f61
-
SHA1
7442544cfefc13856935164e30c4104b09b77af3
-
SHA256
b7342fb0c93869b10b66b3c5850459bbaa0c4e7917bef12f0e5899f66d70b20d
-
SHA512
d1fdf514f346ee7158a5fabdf828dc0951cbe3481a8f1ecd235aa2a497cd101f6cc284aa79151f66f0016bf6e19d22e1220ab994c52d1fe14aff285eb7519db5
-
SSDEEP
768:4I+ptAAw0CqDCHdsfzQR+mAqqu755tUEn5dWtYwSO3YIK2:4IcAAnCObQR05u755tUEn/WjSH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f41b17687cbaf5c77b9edda9460c5f61_JaffaCakes118
Files
-
f41b17687cbaf5c77b9edda9460c5f61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ovpv Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ovpv Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE