Static task
static1
Behavioral task
behavioral1
Sample
f43585cd90add086869bb84ac17f860f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f43585cd90add086869bb84ac17f860f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f43585cd90add086869bb84ac17f860f_JaffaCakes118
-
Size
312KB
-
MD5
f43585cd90add086869bb84ac17f860f
-
SHA1
8bdea90a729412315a10ca617c20f6c93de5645b
-
SHA256
5ff062caf51b9f24b708aaa43e153c74e30a0195df79ba48bd1814151c46be8b
-
SHA512
56bd8b567dd09b8f0260abbe8d55d225eb46984ff66e34be532a1ff2eab32f53e31ee78773e946d367a496469ce121153f91a5d758ae41abcac24f7f12b67c00
-
SSDEEP
6144:8oP9ZXjZPdMqpCCgGU55R3n5Qw6mRc7eFhRUsYbg5BFjrvCG1DV:8oVZXFFMWCC6R3n5QRma7IzUsYbg5BFR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f43585cd90add086869bb84ac17f860f_JaffaCakes118
Files
-
f43585cd90add086869bb84ac17f860f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ