Static task
static1
Behavioral task
behavioral1
Sample
ff9fa2411b6b4241c0b2e256fb9192ff_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff9fa2411b6b4241c0b2e256fb9192ff_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff9fa2411b6b4241c0b2e256fb9192ff_JaffaCakes118
-
Size
97KB
-
MD5
ff9fa2411b6b4241c0b2e256fb9192ff
-
SHA1
a36438cddf696d1d5bdcf54f61e7f7ab41181cd4
-
SHA256
45f93dda6e14f7bc724671a275deb6e7b262b2f2b2fd642bea0447e3504048eb
-
SHA512
6c6a6e27d687ccfdc065a93d35630e4b2eb9fece70f40d08e1b4b3362f9a0eed9ace87d063e5632c0e806a66dd0f5b173a128373c1df2b6879899b616b35d399
-
SSDEEP
3072:cDulXQNrsqp0c6INA2sjwt5Szl6X2Suok:cqlXQNrsqpp61XMvSp6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff9fa2411b6b4241c0b2e256fb9192ff_JaffaCakes118
Files
-
ff9fa2411b6b4241c0b2e256fb9192ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SHD0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHD1 Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE