Static task
static1
Behavioral task
behavioral1
Sample
f61876d8cfcd1b2ab15af1f18572158e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f61876d8cfcd1b2ab15af1f18572158e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f61876d8cfcd1b2ab15af1f18572158e_JaffaCakes118
-
Size
117KB
-
MD5
f61876d8cfcd1b2ab15af1f18572158e
-
SHA1
88317a6cc8a9029b88da8d1bbbb9f8159d208b67
-
SHA256
19fcdc603856cba2c53725f7af67a0872de3b52b2c7a227f1216d6f9afb4fb94
-
SHA512
5d28aad92915bdf040ba8d661964f4de94791eeaf9941cf52d390bc17ce5935e3d1ce32d9384299836f811ef73c859a68965f054b76abe875d28e464dc9931ef
-
SSDEEP
3072:6a0RpyyRGwPB7i6dPzaU0b4fEaWRdGV3IQw:BOUyvPB77qb4EqFIQw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f61876d8cfcd1b2ab15af1f18572158e_JaffaCakes118
Files
-
f61876d8cfcd1b2ab15af1f18572158e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE