Static task
static1
Behavioral task
behavioral1
Sample
f88f19aab3ef6f67db65bc1e85912f40_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f88f19aab3ef6f67db65bc1e85912f40_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f88f19aab3ef6f67db65bc1e85912f40_JaffaCakes118
-
Size
89KB
-
MD5
f88f19aab3ef6f67db65bc1e85912f40
-
SHA1
52a65e740344d4b070aba7d142641147665d3133
-
SHA256
8378efe6148d06e1dd227258ac2b5ba78a7c74d09f389a8bfccc66ecd0f76ae2
-
SHA512
b82734d589000613618a9fd505aa3af89fe77eb274ef9160cd49d6e2703753450e4437aedf2483e64a6de98f858c7e6bebae5da74f90f2d72f98164fc75e1567
-
SSDEEP
1536:/UKugu0hgqa12ajatF0AKf1HVXU2T70LmKMJTHiSyPMsw/jVoA8zFoXw:/URflZ0F0AK5T70LmK0TiaVP8Bkw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f88f19aab3ef6f67db65bc1e85912f40_JaffaCakes118
Files
-
f88f19aab3ef6f67db65bc1e85912f40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE