Static task
static1
Behavioral task
behavioral1
Sample
ffb8c8a1ee5615f39ffcf27dbd7b3425_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ffb8c8a1ee5615f39ffcf27dbd7b3425_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffb8c8a1ee5615f39ffcf27dbd7b3425_JaffaCakes118
-
Size
166KB
-
MD5
ffb8c8a1ee5615f39ffcf27dbd7b3425
-
SHA1
d040c2cba55d832bbd678b3bdd3d8ae3e99f059d
-
SHA256
b3e0a01d948cdd9f4f3c26d139b6c0862c5352f890d2256dc6e5eb0b43545702
-
SHA512
8ce8a68a6fcb31d2f61b00d322400b51a4c0ccd08054fd740eb2e28349b0f5ecd3c6bd64f4df77c6979aea69ffa96adb5f496121f391eee59c4b6e38ebab2f04
-
SSDEEP
3072:GDFhTy7Md36fXkJh0kv4Yxefsx07XhiI5GtOdD1DpE24v:G5Vy4CUj0kYMHiLNy7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffb8c8a1ee5615f39ffcf27dbd7b3425_JaffaCakes118
Files
-
ffb8c8a1ee5615f39ffcf27dbd7b3425_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE