Static task
static1
Behavioral task
behavioral1
Sample
f6ff63c883b0f9c982fcb87547a487a5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f6ff63c883b0f9c982fcb87547a487a5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6ff63c883b0f9c982fcb87547a487a5_JaffaCakes118
-
Size
24KB
-
MD5
f6ff63c883b0f9c982fcb87547a487a5
-
SHA1
97fca869ed8e639aac70144287797641b4dca588
-
SHA256
594fb1ec8c011c3a6fe225fc7137d8cb78e825d87a5ae3cb39109570ace6144c
-
SHA512
39c55d0212d32f92dc01c8792f0adcbf71af541bbe3d61273e89c1da03bc5943c0967a9a127058dab083ca7b05e71fb4cfc8e3d6ad1c4568575e4d7d571028a6
-
SSDEEP
384:PY4GOukRWwTmaGe0QcQ0FW48q/gUH4UHGzh8SHaxPFkKq8P6gy8GJ4lFwY93vYbr:g4tY6Ae0QcQ0Fnx/FmzlKCECZFulFwGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6ff63c883b0f9c982fcb87547a487a5_JaffaCakes118
Files
-
f6ff63c883b0f9c982fcb87547a487a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�d�0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�d�1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�d�2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE