Static task
static1
Behavioral task
behavioral1
Sample
ff3ac395b46867abad29d04b69f785fa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff3ac395b46867abad29d04b69f785fa_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ff3ac395b46867abad29d04b69f785fa_JaffaCakes118
-
Size
1.7MB
-
MD5
ff3ac395b46867abad29d04b69f785fa
-
SHA1
8e60381970224a4a8771f5c4f64e378ab4d9efe8
-
SHA256
2d956eb8526c345b415613fa8d34b140f0ad902f03522c768de85a57bcd96445
-
SHA512
f0f4eb94482b9e338c749f5edb7dc6df21e8b7a7cfd5fa750c5c1280e52b31047d5627076f868491048c9638d786c0248cab6392f4e7e45705a0f986503a2806
-
SSDEEP
24576:aPPD1PPDTMagrRoNk7BZp8PPD1PPDTMagrRoNk7BZphuMC2lFT:oZvMVrRokpCZvMVrRokphuMC2lFT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff3ac395b46867abad29d04b69f785fa_JaffaCakes118
Files
-
ff3ac395b46867abad29d04b69f785fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ