Static task
static1
Behavioral task
behavioral1
Sample
ff8cd44afeea80b49c0a70a1d0c1ca11_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff8cd44afeea80b49c0a70a1d0c1ca11_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff8cd44afeea80b49c0a70a1d0c1ca11_JaffaCakes118
-
Size
92KB
-
MD5
ff8cd44afeea80b49c0a70a1d0c1ca11
-
SHA1
bcf6f8e61cdf33f17d08491bcee1d391317665e9
-
SHA256
96b0e23bc48f2c59b9b7564c72c6b9dd0bb33807ca543fb460ec49aa2304ca91
-
SHA512
92ea1bd04749f6556b4ec514f5fd380a12102d20498538dac046e436c66050133b76cac409dfda6d15770fc6f5b3129227b21ce726d864e12c87ad1dc3812434
-
SSDEEP
1536:3aT8XgkeWclF0w8Qbw9xSI6+9kbO47f7cLE1L2N:3nhIF0w8QJ+E1L2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff8cd44afeea80b49c0a70a1d0c1ca11_JaffaCakes118
Files
-
ff8cd44afeea80b49c0a70a1d0c1ca11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE