Static task
static1
Behavioral task
behavioral1
Sample
f660503bc338e41ebbe324c8c917c39e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f660503bc338e41ebbe324c8c917c39e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f660503bc338e41ebbe324c8c917c39e_JaffaCakes118
-
Size
681KB
-
MD5
f660503bc338e41ebbe324c8c917c39e
-
SHA1
be325fac149de2f38ba41a516f88d741aade718d
-
SHA256
8450b1554c0632b7cd954b68f8b19a0ecfb84f6b79bd6545aa42efb7a09e0055
-
SHA512
395da6e46064cc9ca2f2cb1e0eff415cb3cfc3a7a418ce4597b0b75b34d47bd42d962597b59914d39d662c3d19693ac24ccbc0e693dfc6e4dd1c35a27e8c8f12
-
SSDEEP
12288:CkOjLoNrsBMoAiNxyWOVCL3kWYxoYxn/5y6PNdM1:POjLW4BMoHxyxVm3C/5y6PNI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f660503bc338e41ebbe324c8c917c39e_JaffaCakes118
Files
-
f660503bc338e41ebbe324c8c917c39e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
RCZ0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ULX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE