Static task
static1
Behavioral task
behavioral1
Sample
ff6af06aded7550de84f63ff6456410b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff6af06aded7550de84f63ff6456410b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ff6af06aded7550de84f63ff6456410b_JaffaCakes118
-
Size
293KB
-
MD5
ff6af06aded7550de84f63ff6456410b
-
SHA1
41971cdb6b89cc8cbbbbc4d0395382da5695d1f5
-
SHA256
e54d0c349492552700f21d647ff8adc866c001693e7a7249ae4b99080e8591b2
-
SHA512
d1f96e31ad5462cc141e10794d912e6dd9349a1f67b412acc3318be1b7ec725da958e9e50c485bf8c596704c1e623411de06f93065e0efd982e8ecd820f98403
-
SSDEEP
6144:Hq2ideW83gPZ4Jgk/e3ocVRM9egLQa4T1FUZ3ogcNql/xAbQI8D0i+7q9StroXa9:nisWyuZ46k/e3ocVRM9egLcT1FUZ3ogs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff6af06aded7550de84f63ff6456410b_JaffaCakes118
Files
-
ff6af06aded7550de84f63ff6456410b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
. Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE