Static task
static1
Behavioral task
behavioral1
Sample
f6739c68d73a4b9af43fb2083a9849ec_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f6739c68d73a4b9af43fb2083a9849ec_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6739c68d73a4b9af43fb2083a9849ec_JaffaCakes118
-
Size
127KB
-
MD5
f6739c68d73a4b9af43fb2083a9849ec
-
SHA1
221e67ae1bb499ac4d3fd727d16f23a51102ef0c
-
SHA256
926585f990faf0296bbaaeb81aa76c23bb49b1e0ac368ab4e4a7b108f4bad97f
-
SHA512
ae0c6a07b32c0dc66e28b1b9d97b20eb5ac1a81055c2efeb589f641a980f1967ffd8cb13aeacbb5ccc90c2c7a976838dbb8bcf076a808f54364fac17bfe73fda
-
SSDEEP
3072:3VidYlbJ2TT6T8dxbgSxZVqdpQNAi84aWTmCPO6ocZqyAVJi:Figu2gdBg6qdyWiRahC1ocoyyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6739c68d73a4b9af43fb2083a9849ec_JaffaCakes118
Files
-
f6739c68d73a4b9af43fb2083a9849ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE