Static task
static1
Behavioral task
behavioral1
Sample
f90773dc8f9c927338e7e4754d47e132_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f90773dc8f9c927338e7e4754d47e132_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f90773dc8f9c927338e7e4754d47e132_JaffaCakes118
-
Size
125KB
-
MD5
f90773dc8f9c927338e7e4754d47e132
-
SHA1
d0e726b67cbab5b0b16a76af8afe48bd5e4fa751
-
SHA256
e08fa936d4ca34b4d7446753f8ff62f4045e9c04be9c793331a8c8d2414b9d99
-
SHA512
952fa0496badd314ddef8781a0e97fb29147a9b2c384f31a6dfac4bc1da7a2eb6ef90822950ab1a1882b9ab87ca81f241d644f1ce8e13a895d96c8b1be6dd886
-
SSDEEP
3072:mmR4AvMqn3bbLPmmzPq7wwNpRa8T7RWQcEyK7xtGvnX6cBsrkn1BbLY:JR4APmmzP3KnhcEd3G/qcBsrAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f90773dc8f9c927338e7e4754d47e132_JaffaCakes118
Files
-
f90773dc8f9c927338e7e4754d47e132_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 871B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE