Static task
static1
Behavioral task
behavioral1
Sample
f8ce95935a4609baf86365a2ed9c87a7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8ce95935a4609baf86365a2ed9c87a7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8ce95935a4609baf86365a2ed9c87a7_JaffaCakes118
-
Size
1024KB
-
MD5
f8ce95935a4609baf86365a2ed9c87a7
-
SHA1
0d0f71dfc223ef3f04b122dde000171a7ca42255
-
SHA256
ddd0bda480300368205fe2eea1869babffe64ee3d5b0d9d4f9a4996b88b143b7
-
SHA512
20f10603affb78176917321b2484b2dea601b56125add2af0b90e87abc729d190f6dc55779a8dc3ff81b799534b45d98698cfce821b8721958f221c0f0d59fef
-
SSDEEP
12288:KOWuTshIoGNvmT1u9kldNdxmVi/c5OHOA1ZcKaCSm0lXl1wDNrw5/RlY2r6UhMGZ:XWuTs3461uelCQ5uAQKzS5wKe2a2+E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8ce95935a4609baf86365a2ed9c87a7_JaffaCakes118
Files
-
f8ce95935a4609baf86365a2ed9c87a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 359B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE