Static task
static1
Behavioral task
behavioral1
Sample
f9ed110e852bd24ca956732d3725e51c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9ed110e852bd24ca956732d3725e51c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9ed110e852bd24ca956732d3725e51c_JaffaCakes118
-
Size
18KB
-
MD5
f9ed110e852bd24ca956732d3725e51c
-
SHA1
05249cd6aaf79df46e13b2911c8c27acaa06547d
-
SHA256
28b4216c3e22fde54e0834a8b9b4ff48112825bfd60c2b3a2f3e21c244f49fed
-
SHA512
14431d17525b02f502a98178e060a7cf8fcfef8d6252ceb991c579a40f239b8b7f81e137530be0aac5aa4d7278dd1d396f5560af75c8de408da593fdfc32e05a
-
SSDEEP
384:moCGOuP9GjJgPAJSxSeFVLn5BnQpPEdNre4uILW6fMDzi:EAWeBSeLzuPuNuIBMni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9ed110e852bd24ca956732d3725e51c_JaffaCakes118
Files
-
f9ed110e852bd24ca956732d3725e51c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
wdfsd3s0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdfsd3s1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdfsd3s2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdfsd3s0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ