Static task
static1
Behavioral task
behavioral1
Sample
f9b5dfe2a6ea412b1ea61134df289b6a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9b5dfe2a6ea412b1ea61134df289b6a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9b5dfe2a6ea412b1ea61134df289b6a_JaffaCakes118
-
Size
28KB
-
MD5
f9b5dfe2a6ea412b1ea61134df289b6a
-
SHA1
e8c613c3270f493956662b987ac948a8c122ea00
-
SHA256
e29c325faee31b9a34f87fe73cb1b55048970bc42ce29141753b1f744e420e89
-
SHA512
baae326e818f3fed97905495a0f1e54a669aab4f8ad3b7fb1eb18d7cadc2f05a133089aa38bcca1642385512e403ec30d7cb804cb4756e1c4bfa0ea9d6c5cd4c
-
SSDEEP
384:PIXIM8R65eT4No1KEDhMRXKRgDGoT0sEL:QcwMT4KDhGD11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9b5dfe2a6ea412b1ea61134df289b6a_JaffaCakes118
Files
-
f9b5dfe2a6ea412b1ea61134df289b6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 16.1MB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ