Static task
static1
Behavioral task
behavioral1
Sample
f64dbacae6ef59ee9803604fad0186a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f64dbacae6ef59ee9803604fad0186a7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f64dbacae6ef59ee9803604fad0186a7_JaffaCakes118
-
Size
1000KB
-
MD5
f64dbacae6ef59ee9803604fad0186a7
-
SHA1
ce01e9e327b3b6ed042898a8fc93843e1871e6f1
-
SHA256
8c0da277e772c062f8cceb4649176e5823ac2750aa4e89dc8fc803c65219823d
-
SHA512
f0b2c32263e35c21587e163336788d2a23a4ef4e7d5891631b5d48fe39cce19d834cdf04d20212a6f9cfc1dce060094b8c05d0f80ee8535244150e2c0e33eb93
-
SSDEEP
24576:FdKe8Kc4BhLMSjZxObfl+dl7L3fX+1B+5vMiqt0gj2ed:FdKet3BmSt8fl+dlnPXMqOL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f64dbacae6ef59ee9803604fad0186a7_JaffaCakes118
Files
-
f64dbacae6ef59ee9803604fad0186a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ