Static task
static1
Behavioral task
behavioral1
Sample
f7d5b4fa89ab1548ab0d18a16c825f3c_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f7d5b4fa89ab1548ab0d18a16c825f3c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7d5b4fa89ab1548ab0d18a16c825f3c_JaffaCakes118
-
Size
16KB
-
MD5
f7d5b4fa89ab1548ab0d18a16c825f3c
-
SHA1
1f329791bb91d4e286977055a8049ad6d539535b
-
SHA256
10d1338102cc1798c4732e06a91d5b5bfaf9d97d9ba51d2036531a6d62047e2d
-
SHA512
56c2481a78f682ba4f51d7c2df0bff94bb33bfd4945d648aa8fd08af01f08acc79ddd427b9dce079f7162e4346063dd47479959acddc3a416b88e9a9b3fea0f3
-
SSDEEP
384:60CO7WZjZwVeVe7O+Fp/C167kgax3YGm4kkUAD:Vx2jZwVg8OWK16Pa1nkkUA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7d5b4fa89ab1548ab0d18a16c825f3c_JaffaCakes118
Files
-
f7d5b4fa89ab1548ab0d18a16c825f3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE