Static task
static1
Behavioral task
behavioral1
Sample
f892f5cde2c213bcf1a0b7e4ca460959_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f892f5cde2c213bcf1a0b7e4ca460959_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f892f5cde2c213bcf1a0b7e4ca460959_JaffaCakes118
-
Size
184KB
-
MD5
f892f5cde2c213bcf1a0b7e4ca460959
-
SHA1
31ebfa6528d6d04d9e8a90881f1935039f376093
-
SHA256
456d6e8bb036e8c6782da773811c795c69e832c19ffdf33755bb8b7dfd23dd88
-
SHA512
4b76a92f498bf11d728c5c8e585724ac6c35f76fc2edd73e8adfd41caa83f4209771b1d67c4ccac7fcaf5459b6af7e52c3c81166e284455eba78e96d73e867fd
-
SSDEEP
3072:rtQ+wkvcxasg+QO4bhqKoM3PWmpn0ZXTO19hVKwH:rtQ4vcssqd/Wmpn0019hn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f892f5cde2c213bcf1a0b7e4ca460959_JaffaCakes118
Files
-
f892f5cde2c213bcf1a0b7e4ca460959_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE