Static task
static1
Behavioral task
behavioral1
Sample
f82e1a0066f1e402c37dd21c6a96e99e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f82e1a0066f1e402c37dd21c6a96e99e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f82e1a0066f1e402c37dd21c6a96e99e_JaffaCakes118
-
Size
29KB
-
MD5
f82e1a0066f1e402c37dd21c6a96e99e
-
SHA1
3f631940088ee025b3ef3d67005e3c9fe6f02a0c
-
SHA256
e77afdce72914dd5a565a899e1b05b81b0005243d5c3c652bcb3b22ef2fad302
-
SHA512
835e6cedd28ac82764e8df27d82b79d15309046240e92a2de3269237c00cfd0bc1cb30a8beb18febace9269ec0ac1a9a5e060460dc6a1cf177c5c81d77f92044
-
SSDEEP
768:VFHPprKkX39y628QeOdFtXjr6uusPTsJYVJzZM:VNdKkcBBBFtXiM6YbZM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f82e1a0066f1e402c37dd21c6a96e99e_JaffaCakes118
Files
-
f82e1a0066f1e402c37dd21c6a96e99e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9kf131js Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ysyfnmf8 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ