Static task
static1
Behavioral task
behavioral1
Sample
f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118
-
Size
37KB
-
MD5
f832f9f0afe3d12157a846a12a0f3957
-
SHA1
e5bec442e880bbf8a7f4cb4ced9268b5b26898d2
-
SHA256
0b7cd3c23befba454245837fe294516f69893d1b9e1d573cc8880a7e6ea433a3
-
SHA512
c9aef4e722711fcfa95781b966a0c1bcd1de46ccfa220523dd2a021b04ef86f2ff941536a4dfd92d1b5c1c434ae86e792cf028c838f0fd6b9618b36dd3097b74
-
SSDEEP
768:hTiyQ2xFxT+5qKjOFQ5Y5f9/Ers4R/Lv5ToxRCNCa/ZqmCo6ppB1xKUyHl8nyX:FiyzxFpUjd08lRLv5OrppRKUyxX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118
Files
-
f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE