Static task
static1
Behavioral task
behavioral1
Sample
f9e0681c746cc297c35d154ec989df90_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9e0681c746cc297c35d154ec989df90_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9e0681c746cc297c35d154ec989df90_JaffaCakes118
-
Size
22KB
-
MD5
f9e0681c746cc297c35d154ec989df90
-
SHA1
e79897d139fd509f6532efcbf7bca387f7cdd902
-
SHA256
e75bae8fcfa045a19bdfed4683d565297be50c405c5a9851b079e44b3aeac65d
-
SHA512
bc49f583e8cd1e652baf2fd775ea63d0ab80e6e215e204ad42bfd3868af666ae2c4a4cb003581454adc121160bc7246da47ed2235ccb16ad2e4de075ebe9e03a
-
SSDEEP
384:iGTqrs4Yi85oTIlo05n9jX9mlgAqN1yvlBxSyrTEf:iGT0Yi85oTK9n9zzX8ejf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9e0681c746cc297c35d154ec989df90_JaffaCakes118
Files
-
f9e0681c746cc297c35d154ec989df90_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
...... Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..... Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ