Static task
static1
Behavioral task
behavioral1
Sample
ff8d214d9112d2904535bfc9e52eed97_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff8d214d9112d2904535bfc9e52eed97_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff8d214d9112d2904535bfc9e52eed97_JaffaCakes118
-
Size
184KB
-
MD5
ff8d214d9112d2904535bfc9e52eed97
-
SHA1
f06f46c09d9e765bc147f2df07b79e5070cca5af
-
SHA256
c0ee3146b6890481c302d43c9721a716868be7856f2841381dc7432edd68d6d4
-
SHA512
4d79c1bcba3b7045824b44d699fa0bf7663673f84368d96dacfb06ffeb166a350b3e81457c7343120c07777153e5bbe8538012fbbaa8c2051c917acd817cb9ca
-
SSDEEP
3072:ZiikoTNXXlz07Ojbd4G5Y8Fy7lvMnW9EuDhxYPPsJNl1vyFK:Zixo9Z070d75Y80ex4Nl1vyF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff8d214d9112d2904535bfc9e52eed97_JaffaCakes118
Files
-
ff8d214d9112d2904535bfc9e52eed97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ