Static task
static1
Behavioral task
behavioral1
Sample
f800e414b03a7a9f8b2f8565c42a5e4a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f800e414b03a7a9f8b2f8565c42a5e4a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f800e414b03a7a9f8b2f8565c42a5e4a_JaffaCakes118
-
Size
2.6MB
-
MD5
f800e414b03a7a9f8b2f8565c42a5e4a
-
SHA1
77a2ee99a526e5b5db4200d51636aaddbd33d6cf
-
SHA256
37b281669bfef4f6a1a6c95504754043693ff3d04e08ecdad8afa8caeedbb5e1
-
SHA512
dd6f8258a2c3aca784a8de782215eb30b5809322c3a460ea52b1d74c5f318b769156abaeb39d5adee8cb3af64f483c9abcf1c51844e7f3659cf3cc88ed5ef6f7
-
SSDEEP
49152:Illx+0ntZm5pIJgLy4X71LGWGQFyVZqKNIzdy+qNHCtGILrLO3lfF9ECcXad:30Xm5pIeLysKQFYZgo+ZQOCcX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f800e414b03a7a9f8b2f8565c42a5e4a_JaffaCakes118
Files
-
f800e414b03a7a9f8b2f8565c42a5e4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 718KB
IMAGE_SCN_MEM_READ
VProtect Size: 356KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ