Static task
static1
Behavioral task
behavioral1
Sample
f4248be81b9cb54c598732768de91777_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f4248be81b9cb54c598732768de91777_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4248be81b9cb54c598732768de91777_JaffaCakes118
-
Size
748KB
-
MD5
f4248be81b9cb54c598732768de91777
-
SHA1
cb7949303bd8e6b0e96574d8f7874e7099455f67
-
SHA256
7d4acea1f6cf28e5d928a1baff9973a397ba77be0450faaade5283d1b9dbebbf
-
SHA512
2aa45ec9d9dff7e1e1cbf4f3380a07d1133bb0aea04892eb771241eef9c44106326b4a698f882efcb754ee8d519b04d33f03c27e24878287cfc39f16cf129d45
-
SSDEEP
12288:UZWtI6RktOB0vOB06YeZJys73dOvXDpNjNe8Ni0ERcg2:UuhatOWOoeZJ8NI8Ni0qcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4248be81b9cb54c598732768de91777_JaffaCakes118
Files
-
f4248be81b9cb54c598732768de91777_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ