Static task
static1
Behavioral task
behavioral1
Sample
f8acbe6d5f861e007b7bed98ae39b3d3_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f8acbe6d5f861e007b7bed98ae39b3d3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8acbe6d5f861e007b7bed98ae39b3d3_JaffaCakes118
-
Size
13KB
-
MD5
f8acbe6d5f861e007b7bed98ae39b3d3
-
SHA1
8533699af3fa0c2066648677d5325fed13848573
-
SHA256
04b638385effc2a036248c5f839e1d3458b996bc194de004c1b3961af4952d89
-
SHA512
1faa549eae75b3e1b94a9ebb29ca379be6a04fc13c89605c7808777cd152f36896d8fe3f910e53788bd9b16ea98d5809a24182a0283e80bbf8471753b221e72b
-
SSDEEP
192:mwdqW/W/KX1PrGOu4eFkjjdjxcYykt1up2mpuyOQUx0cUh5LXz4HKb2X2X0f9:mZW/W/KBGOub6fdjWg4uh6XRE2w9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8acbe6d5f861e007b7bed98ae39b3d3_JaffaCakes118
Files
-
f8acbe6d5f861e007b7bed98ae39b3d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�&B0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�&B1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�&B2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE