Static task
static1
Behavioral task
behavioral1
Sample
f9691147ed0e48ee8d41dd97bbc96dea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9691147ed0e48ee8d41dd97bbc96dea_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9691147ed0e48ee8d41dd97bbc96dea_JaffaCakes118
-
Size
126KB
-
MD5
f9691147ed0e48ee8d41dd97bbc96dea
-
SHA1
5f6a401c2b99722bfe5bb13ffae9d6f946542f3c
-
SHA256
015812e6892c16e7fd41b6d7dd233227b87ff1a1a02ceea80cbb43b5e4ad0f88
-
SHA512
93f39e86a7a59f5d800c7fb2ac5f253faa1d0b73c687b86d0874a77631b2a8a5b79ac87ddda3ec9f1ab0b43937d161c6f8c2804f1e749900cad02277f9272c98
-
SSDEEP
3072:rvVTVwfbC3ObVb9BVtnQpkrzJmwtDb/u9Qu1fbWH7RUClo3vw:BxKXVJQpU8wtDz9yCSvw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9691147ed0e48ee8d41dd97bbc96dea_JaffaCakes118
Files
-
f9691147ed0e48ee8d41dd97bbc96dea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ncej Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbwlat4l Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8m5v Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE