Static task
static1
Behavioral task
behavioral1
Sample
f966d5bb59c96cbb804d4f209adb1174_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f966d5bb59c96cbb804d4f209adb1174_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f966d5bb59c96cbb804d4f209adb1174_JaffaCakes118
-
Size
1.1MB
-
MD5
f966d5bb59c96cbb804d4f209adb1174
-
SHA1
dfdac2183bdb1031b0cfd78e46287ea7e8ce9128
-
SHA256
166d03b7b7529cfcf99b55e4d5a8da0af418d4802346ab68083840cac3a76c31
-
SHA512
1f0468931a2d3142b0456da9acd49b2c620a2a4176f7358420b98003d9e51ab9bf1b71f8a4b8aad4a5f1f5d0a31e84c9ffb2a52d399339d6b3732d655a4b5fc2
-
SSDEEP
24576:UuhabeZJ8NI87eZJ8NI8TOfeZJ8NI87eZJ8NI8TO9f:bR8U898U8If
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f966d5bb59c96cbb804d4f209adb1174_JaffaCakes118
Files
-
f966d5bb59c96cbb804d4f209adb1174_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ