Static task
static1
Behavioral task
behavioral1
Sample
f97dcb325127031b187cbe3331957c5f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f97dcb325127031b187cbe3331957c5f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f97dcb325127031b187cbe3331957c5f_JaffaCakes118
-
Size
21KB
-
MD5
f97dcb325127031b187cbe3331957c5f
-
SHA1
f5f358340c8d391ae2403ee8167e7c4b06ad28fa
-
SHA256
a3352342a277f81907006d22c45bda6904ed1bf6741385eaff805b8706f13961
-
SHA512
16289688b876d0f6687da322b78149e99c055100770291fdafc5a515634d6e9ffa40c16f42d6cfbb80f728f4a45a78c19e796a65aecee553bab5403948fa3d86
-
SSDEEP
384:dYJK0aUNuIKoyv3yJoeY1jCt2XciqGKCm1/RmLnGAzq4Ms5gu2s6HCh:OJK6MoeyGeY1jCt9io1ZmLnGsqPO12sL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f97dcb325127031b187cbe3331957c5f_JaffaCakes118
Files
-
f97dcb325127031b187cbe3331957c5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE