Static task
static1
Behavioral task
behavioral1
Sample
f66fdf8c74b6fc2b2af4e11b2d5d6f25_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f66fdf8c74b6fc2b2af4e11b2d5d6f25_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f66fdf8c74b6fc2b2af4e11b2d5d6f25_JaffaCakes118
-
Size
7KB
-
MD5
f66fdf8c74b6fc2b2af4e11b2d5d6f25
-
SHA1
b610942af3b1a2eaaf4f5e7ccce9de0ec8c4bd6d
-
SHA256
ef44574b9fc99f99838d6c868b338c318763069af6af41447e1183915d11ef8c
-
SHA512
d05a2b0525a94f7c4ba8b1e512ce4252ee4206a3c8821422695228b9aa42a9d456ea5a3c7399854d6a0c386058f14f20a9026a49d9fc461b2f39ba89fd6e7bd2
-
SSDEEP
192:HLew5NaSt4PuzAxbwCMrpY7e8LqPZo5LdCfq1Rn6O3:H53htdAxbr6+e9Pfqbn1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66fdf8c74b6fc2b2af4e11b2d5d6f25_JaffaCakes118
Files
-
f66fdf8c74b6fc2b2af4e11b2d5d6f25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xiaohui Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmym Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE