Static task
static1
Behavioral task
behavioral1
Sample
ffb5cd136a975f46286640952976dc0f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ffb5cd136a975f46286640952976dc0f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffb5cd136a975f46286640952976dc0f_JaffaCakes118
-
Size
128KB
-
MD5
ffb5cd136a975f46286640952976dc0f
-
SHA1
2cb5342c55a6b9a7c4e4ecd6db3f941ae87895c8
-
SHA256
1147864657772b7a5c5b5a78002b781c57bdda0e212665959fe7fb775220aa8c
-
SHA512
f88b3d2f96ddfacde714c0484e7a53c305d598414f93d54ff5bac273c5f040d64eba4258c9411f6551af20b3e6c302bcbe148a8c741009a79f020fcc7740dd2d
-
SSDEEP
3072:eMSWRcSb4ojLVqRpsuXLS3KTqOtS5uJAcT0pI:eMSVSUotqRGOLS37kvWpI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffb5cd136a975f46286640952976dc0f_JaffaCakes118
Files
-
ffb5cd136a975f46286640952976dc0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ou56q270 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ou56q271 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ou56q272 Size: 615B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE