Static task
static1
Behavioral task
behavioral1
Sample
f9a5000fbccc92dd46a9afa87de24e02_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9a5000fbccc92dd46a9afa87de24e02_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9a5000fbccc92dd46a9afa87de24e02_JaffaCakes118
-
Size
11KB
-
MD5
f9a5000fbccc92dd46a9afa87de24e02
-
SHA1
20238443a971f9c234f95bfa533026e0f27ebbdf
-
SHA256
0c2dfd5b544911c69e2808a906f4b680cf0e3bbb51a21a81004f4809f4b19ff4
-
SHA512
629987fdd777964879e8615e42301464b4dbc232b3696462a25e10e550f510869292d640b77034374ce08897330d2682c3c0182e03302d0bf7aa8d242da94d8e
-
SSDEEP
192:SbUZF1gfaoh4x4hqLNS9I3rxKq3VIEMM6EIbA0x5rNLGGH7:SbUB8aohRhqLe4dKq3VIEMhExOJG07
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a5000fbccc92dd46a9afa87de24e02_JaffaCakes118
Files
-
f9a5000fbccc92dd46a9afa87de24e02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE