Static task
static1
Behavioral task
behavioral1
Sample
f6775ca1b26354b9f41d65ef7ee4b343_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6775ca1b26354b9f41d65ef7ee4b343_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f6775ca1b26354b9f41d65ef7ee4b343_JaffaCakes118
-
Size
1.2MB
-
MD5
f6775ca1b26354b9f41d65ef7ee4b343
-
SHA1
42e2ca3191673fd2022ff74162164facf84dc7f6
-
SHA256
4f6396e0790a527fd20d24c41d2eaf97f1aefd3c16f3c1d22282149ee91a3836
-
SHA512
e1bb556b55408523e63c183590e0bb427c6c0e47e5f341d40758ffd64bea98b75de6d7b1f9fa006ae434196b73fbce0f28506a73050fb84b97d145891eec7e31
-
SSDEEP
24576:l4NKxPVuus/OXvQEYz0l/KHuNXyqy7niWi1UhVD89IP3rA0hKQ0KSY76DnoK00lj:sKFxXXYENMiX1Q18yA04+6LoK0wz8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6775ca1b26354b9f41d65ef7ee4b343_JaffaCakes118
Files
-
f6775ca1b26354b9f41d65ef7ee4b343_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE