Static task
static1
Behavioral task
behavioral1
Sample
ffaa011cb5cf732595f2d35675423ec4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffaa011cb5cf732595f2d35675423ec4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ffaa011cb5cf732595f2d35675423ec4_JaffaCakes118
-
Size
2.3MB
-
MD5
ffaa011cb5cf732595f2d35675423ec4
-
SHA1
28e2878cc89b492800acc03a97e8539e1f3ceaae
-
SHA256
7f2b7de4edbcacd733e8f73849a9f9ac089700a9ca1eaa65d755316bb2db57ff
-
SHA512
ec604304c6999bcfe9339564ee9450bb450ceb9b45c3da79e05bc2d7a8adbc8bc438cde7397eae2aab689f6e678f83af204c3f71328e8306778ecaa7e07bdb50
-
SSDEEP
24576:WThGppro4uMMs06MKnmRZU1CJpZEeVMV8qzuQdq58APNacWYouQdq58APxS2fr6m:gIz7lmZUiE0MXKQUaclrQ52+Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffaa011cb5cf732595f2d35675423ec4_JaffaCakes118
Files
-
ffaa011cb5cf732595f2d35675423ec4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.linxer Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Mybr Size: 818KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE