Static task
static1
Behavioral task
behavioral1
Sample
f70115f4a21bd5e2f306551c2cd6ac85_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f70115f4a21bd5e2f306551c2cd6ac85_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f70115f4a21bd5e2f306551c2cd6ac85_JaffaCakes118
-
Size
52KB
-
MD5
f70115f4a21bd5e2f306551c2cd6ac85
-
SHA1
f945ac4c331042f52574802185fa9da61c3784b1
-
SHA256
e54179fff6181645a5207d8835dd05142db1d5cd95cfc50f1e1a4fa7e6eb45cf
-
SHA512
f32c54461bc730d2e25cb7f2e4710672710534de3df0fe9bccdff528b078d09ad091853988056a6c23838a50a1629cdea7053f04f551ab579be241162f2c16f9
-
SSDEEP
768:+wC3IEVnMUxckirMWQXDuT+pxvPDgAiXKZC2p2ng4nGwcskl:+rYUwrJQXcCvfA2p2nNWs+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70115f4a21bd5e2f306551c2cd6ac85_JaffaCakes118
Files
-
f70115f4a21bd5e2f306551c2cd6ac85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 336B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE