Static task
static1
Behavioral task
behavioral1
Sample
f739af145b804d090c15b7a0fa7269b2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f739af145b804d090c15b7a0fa7269b2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f739af145b804d090c15b7a0fa7269b2_JaffaCakes118
-
Size
207KB
-
MD5
f739af145b804d090c15b7a0fa7269b2
-
SHA1
f0ee67a9c47c4c3f9e08604ce80f76ab09b651b2
-
SHA256
e552b49b4d2cb84095211c279eb0a6390bbe2e80bf133ba012294d8d5761d8b0
-
SHA512
fe5169b03ab3c2ef60a11268f83ccdac2d309993fb8244cdd7e63bd810778f86b7efe7e68ce776e64b31650650444c0d895fc87c14e48c3fb9fc051de94f704e
-
SSDEEP
6144:Hwq+TyifixTmAcThAkZThMTMfd1E6dqi4py5e:qXfix1c60yQEy1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f739af145b804d090c15b7a0fa7269b2_JaffaCakes118
Files
-
f739af145b804d090c15b7a0fa7269b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
. Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE