Static task
static1
Behavioral task
behavioral1
Sample
f746317a8f7985c0700f2ac376199e2d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f746317a8f7985c0700f2ac376199e2d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f746317a8f7985c0700f2ac376199e2d_JaffaCakes118
-
Size
118KB
-
MD5
f746317a8f7985c0700f2ac376199e2d
-
SHA1
6ce38eaf93e034c58d2856d7b7aeffe31e32b4b2
-
SHA256
4e0088e06e29d519a007aeae93144a64389520a6ed4961bf580748a5d2708b60
-
SHA512
64ab7fe98fbbb068997cd1dacba2c10544322b267ac4cebf171149a32b5b6f5addbff39dfe9358dbd2d3a610fed1d7c9cbecd15d91587eb70b745bdf7cecb9c4
-
SSDEEP
3072:/tiLZHJ2hjL4DSpZQ8lcKX8j2xDC0vifAtHm/N1T:MZiL4qynADCermFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f746317a8f7985c0700f2ac376199e2d_JaffaCakes118
Files
-
f746317a8f7985c0700f2ac376199e2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE