Static task
static1
Behavioral task
behavioral1
Sample
ff047e0e5c1e6569d7f449b7de7f7863_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff047e0e5c1e6569d7f449b7de7f7863_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff047e0e5c1e6569d7f449b7de7f7863_JaffaCakes118
-
Size
76KB
-
MD5
ff047e0e5c1e6569d7f449b7de7f7863
-
SHA1
bda4b6d2b3df2c97b7eb96d1172a864fea5ea618
-
SHA256
d3cb3cb4264baf0930fe10dddb1a1499c22b7afa27328249faa5ca5cac631666
-
SHA512
b46111e64d79702b9a8e594a8cfcb8c8445b8fc18292778c06053658dbacd48e5c5e28ed9d2e10bbd0573e8d4f97348ffabe68707111fc736e376fad6c921b4b
-
SSDEEP
1536:cZHfEJz2kbzhV1ALz9Ml7SC7rJjdhQaIowicrmfpQE6OE5:cBw2knz1AP907SyNdhQaDvfpQgE5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff047e0e5c1e6569d7f449b7de7f7863_JaffaCakes118
Files
-
ff047e0e5c1e6569d7f449b7de7f7863_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 72KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE