Static task
static1
Behavioral task
behavioral1
Sample
f9a102fcd02b1e2e98de79dec7edab7d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9a102fcd02b1e2e98de79dec7edab7d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9a102fcd02b1e2e98de79dec7edab7d_JaffaCakes118
-
Size
1.2MB
-
MD5
f9a102fcd02b1e2e98de79dec7edab7d
-
SHA1
6ea6413e285ff61724181c0a7b7c21212f1603df
-
SHA256
0b42cbe7de73b57a4ff24c63cb5d93f95852bc948954288579cfc0f538b69f5a
-
SHA512
9f080eee26ad5aac068097991cb74fcff756037ac237174a4e84d986a69d2c926dbc054cb3387fca8996a05c113de1f862fd4cf4c9537dd375fc121c9065c1b0
-
SSDEEP
24576:uD4h78p5B85l3tDo3QiGWzdm+V3wu00qmgzQ8xvIFUBuAShF96+X2UxljY:QYIp5B8r35GQiVpHa/zQ8xgmcAu96+GI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a102fcd02b1e2e98de79dec7edab7d_JaffaCakes118
Files
-
f9a102fcd02b1e2e98de79dec7edab7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
06d90141d3fdab7f9e0de825e6c197f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetFileSize
Sections
.text Size: 665KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 563KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GAX Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DGQ Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE