Static task
static1
Behavioral task
behavioral1
Sample
f602635e521cc83f44cb8f8ed438a3ce_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f602635e521cc83f44cb8f8ed438a3ce_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f602635e521cc83f44cb8f8ed438a3ce_JaffaCakes118
-
Size
281KB
-
MD5
f602635e521cc83f44cb8f8ed438a3ce
-
SHA1
18db370e8df11520102a64ea751f352ca447c08c
-
SHA256
7bb1f43ca788cb4d480ed5396b6d66b1db89cf5a7ee12e2dfd68e9cff5e66039
-
SHA512
0bfff7511c656382cd20b6f8d9c9854732e77f83ba605e4d2738d87063cff1d3b988cdc4ce8133816521536c5557163a067090aeedb483413e5551648d84354d
-
SSDEEP
3072:maSccsWlXCFLcVygqcGgw9a9TRhmSlXgvL4L8UnW6fgLRlZdOu7qMvy5Skm7TgpL:mFDCWwEVLJLW6S/77vy4kKNgEk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f602635e521cc83f44cb8f8ed438a3ce_JaffaCakes118
Files
-
f602635e521cc83f44cb8f8ed438a3ce_JaffaCakes118.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 379B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ