Static task
static1
Behavioral task
behavioral1
Sample
f9f04fdd6d3862b4c5ffa2ada4ec142c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9f04fdd6d3862b4c5ffa2ada4ec142c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9f04fdd6d3862b4c5ffa2ada4ec142c_JaffaCakes118
-
Size
12KB
-
MD5
f9f04fdd6d3862b4c5ffa2ada4ec142c
-
SHA1
fd690c2a3937d6e591c1ab859a0c0a0358a4d7da
-
SHA256
05ffde8b1f2758d0a3654ca0a568f88459980e2057e814fbd3867d9a5de47daa
-
SHA512
b7ebdfa76848aba6246a090ff01c73545fee4c438eaea4a34bb0cf373679bad8a9367873ae957b1865136e4066e7cfb819dd0b4827bcbc363ce15166a6c4a659
-
SSDEEP
192:MKyH63+5yHtA80YQ4wpBfwCa8wIaiDyK2CX551keV75NpoMZAy1XBL5Qg:P+8AjY/4Nw1271kO5ToMZlNBFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9f04fdd6d3862b4c5ffa2ada4ec142c_JaffaCakes118
Files
-
f9f04fdd6d3862b4c5ffa2ada4ec142c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE