Static task
static1
Behavioral task
behavioral1
Sample
f8a38d8310a4e6e191c80e75ad254911_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8a38d8310a4e6e191c80e75ad254911_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8a38d8310a4e6e191c80e75ad254911_JaffaCakes118
-
Size
127KB
-
MD5
f8a38d8310a4e6e191c80e75ad254911
-
SHA1
23f76e0b2a8fc1915aeb3396cb639e5cccabf28c
-
SHA256
a6324a8b579fec958dbbf034cc96931049e0521e12a6064cb314f63b725806e3
-
SHA512
6f9bd32cf35f9b8c97a821bc00036936e76c733ee611757f1d862c0dd43884b72e2b5064fd2f85a89c2328f6087ad132884d78f3e2736cade9aea8df376d650a
-
SSDEEP
3072:tur24gXWVe9Wc6wo5ZF2ILu7+XimoJ11PNbF:Er25Ws9WcA5ZF2dc0nHbF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8a38d8310a4e6e191c80e75ad254911_JaffaCakes118
Files
-
f8a38d8310a4e6e191c80e75ad254911_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
4 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wce2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE