Static task
static1
Behavioral task
behavioral1
Sample
f733af13b6cf099c2a2e7f7eb2d93fe3_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f733af13b6cf099c2a2e7f7eb2d93fe3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f733af13b6cf099c2a2e7f7eb2d93fe3_JaffaCakes118
-
Size
512KB
-
MD5
f733af13b6cf099c2a2e7f7eb2d93fe3
-
SHA1
17c0ef7b7eb31c45e34b432e7aefcbdcca0c52c0
-
SHA256
f2e885730fe707b182712938b3c087335200a51b4e61e10029f0e83cddcfc86b
-
SHA512
4927484589a415b3bd70fa5098ee833e17a4b42a261816ecd9191b6731de1b5ad70bb305296fdc4b7f555de4c7800687b73b7cf955ea683e5d7b2761c6a37d4e
-
SSDEEP
12288:vNSMMKoYdY56Xw96txq/Y0hKRmYlriRZxu3cIswaM/MK4:1n3bXE6LwDhwgRDu3cMaM/M5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f733af13b6cf099c2a2e7f7eb2d93fe3_JaffaCakes118
Files
-
f733af13b6cf099c2a2e7f7eb2d93fe3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE