Static task
static1
Behavioral task
behavioral1
Sample
f9eccb3b32368fb9af97515d88adb189_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9eccb3b32368fb9af97515d88adb189_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9eccb3b32368fb9af97515d88adb189_JaffaCakes118
-
Size
141KB
-
MD5
f9eccb3b32368fb9af97515d88adb189
-
SHA1
27d22f4e94cbb190678dfa7ac83615392eee46f5
-
SHA256
b37f7c04b1a36e65de340bbb24161b7712bbc03ed4c29a89391bf76dd02ad198
-
SHA512
324ae3c849ec4bbdf6fa42295fed41d1749a58c52d477d7775f3c12d5df084ce33a0ce1b88c39c660785e5476974ef74c45809c9d6174eb430a958c331749bc3
-
SSDEEP
3072:EWqzZEujS26X9uxpY68Xbs+Hcfu+a7jLIAy9gT3aDrmSdT8V:WVjS2p4Xw+H4u+a73TVaDrmQT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9eccb3b32368fb9af97515d88adb189_JaffaCakes118
Files
-
f9eccb3b32368fb9af97515d88adb189_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 140KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE