Static task
static1
Behavioral task
behavioral1
Sample
ff6363c84b3940f5129599a6b853e768_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff6363c84b3940f5129599a6b853e768_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff6363c84b3940f5129599a6b853e768_JaffaCakes118
-
Size
11KB
-
MD5
ff6363c84b3940f5129599a6b853e768
-
SHA1
bb6dfedf633b6582375d24e98e5a4c39ce67e1d3
-
SHA256
e52ca851ea3d47a794a7bd64d83a2337acbc6314dc478f97162d2882e59b898d
-
SHA512
e494600bb388b9fe9f16d5b259dad422e21d24d594a43a7b19bc6ee5441a63d4ff713eea5ee603db3f25d229d7ef3c44c5c9dd631d4f65b5eb34ca60e926231f
-
SSDEEP
96:U+cFynu8b1bfs7FqXHF8KhVAlO9l5AgEG/6uqf/SxeK/56qu2xpnpIwLj5pZrrlF:/cFyXbJ7XjhV6oEG/69SH9nm2pco
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff6363c84b3940f5129599a6b853e768_JaffaCakes118
Files
-
ff6363c84b3940f5129599a6b853e768_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 882KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE