Static task
static1
Behavioral task
behavioral1
Sample
f88b8e582dc7f2a3243df14b9935b7b5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f88b8e582dc7f2a3243df14b9935b7b5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f88b8e582dc7f2a3243df14b9935b7b5_JaffaCakes118
-
Size
640KB
-
MD5
f88b8e582dc7f2a3243df14b9935b7b5
-
SHA1
e53f3e3ca05f18369f75e86b0f1ac22e6b8cb456
-
SHA256
119d3df94b4d781b35fa2780bebe1134a0c18b1a614380ab7c7859d4db6919f1
-
SHA512
23aea818b22443ceceae976684c37cad06bd2418a95969e348cebd43c0f04ecc1d3759498064e5ae46880437849970e2314b28a6b8dbd4099e5b33d7a1e28640
-
SSDEEP
12288:ikUtRBwRccfDqh5q6rrhgGxixF3Z4mxxbQ31TkvBq:ikUTBwRc6DqXq6rrhgG6QmXbQ31TQ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f88b8e582dc7f2a3243df14b9935b7b5_JaffaCakes118
Files
-
f88b8e582dc7f2a3243df14b9935b7b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE