Static task
static1
Behavioral task
behavioral1
Sample
f688f4bf7dc57016c04b3a9d5fea265f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f688f4bf7dc57016c04b3a9d5fea265f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f688f4bf7dc57016c04b3a9d5fea265f_JaffaCakes118
-
Size
2.1MB
-
MD5
f688f4bf7dc57016c04b3a9d5fea265f
-
SHA1
dc26919ba898c425fd0bb8f1a069c5673cb3b4ad
-
SHA256
a4276c4619292a12b9674544cfe4dbe80c3705e0ac76ae34696f5c9c71e79f84
-
SHA512
5583707cdb2bce61e3fe765cb6a70d0b08b66a875b2d581dd5fa72b4ca1d64a02d2681fb5fd893fd0da71efcc33720f652875899d9d51dfe06939182a58c2ab5
-
SSDEEP
49152:bverQZbd29erQZbd2uerQZbd29erQZbd2Dz:yrQZzrQZYrQZzrQZ6z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f688f4bf7dc57016c04b3a9d5fea265f_JaffaCakes118
Files
-
f688f4bf7dc57016c04b3a9d5fea265f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ