Static task
static1
Behavioral task
behavioral1
Sample
f70d4ea04aef8fad9ae2d35ab88e6f53_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f70d4ea04aef8fad9ae2d35ab88e6f53_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f70d4ea04aef8fad9ae2d35ab88e6f53_JaffaCakes118
-
Size
129KB
-
MD5
f70d4ea04aef8fad9ae2d35ab88e6f53
-
SHA1
043de67a6c16c8c9503d2e63927f66659eca9ba4
-
SHA256
c4ec43e86d154f8134ba4dea59924978bebeed2d6bb5bd63e002756d8e9ecb71
-
SHA512
af8090066e0a011cd7b90a3e0a144ff760df391a0485fcd80ee18865124b0d70fc22c4f75f7fd82d1ea79ae43cb2dbc15c3dec12de1e0f676e984cf3dbba9291
-
SSDEEP
3072:l1f/LmmevbKDspHNvMCKFB+2rjHl0iORv5N7mmkaF7WkM:l1a1vb7pH9KFB+2rjFHGh3dM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70d4ea04aef8fad9ae2d35ab88e6f53_JaffaCakes118
Files
-
f70d4ea04aef8fad9ae2d35ab88e6f53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
twxl7rh Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5legm Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE