Static task
static1
Behavioral task
behavioral1
Sample
ffaaf11b111b49e89d847d6ed10de180_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ffaaf11b111b49e89d847d6ed10de180_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffaaf11b111b49e89d847d6ed10de180_JaffaCakes118
-
Size
388KB
-
MD5
ffaaf11b111b49e89d847d6ed10de180
-
SHA1
fc1a5c6bcf56164ab6a1071e02d9d049051e15cb
-
SHA256
f368a3b2e76ac084f9a64af6eb7b760affaf44e92b09ced1fbf645206cf3c005
-
SHA512
c7fe91380fa48845b4bef3096d9e9a9998db37aadf3dce2a5b6d0f187b7d75f0fd4444d34269602b64d60f70f2f6bf171f0c13297e31dbd34004034c514c2f6b
-
SSDEEP
3072:ZEg5vk/t4lLCK417Y0iKMgpDDDDD0A3zwSsZC0NgZoC:ZE3l48K417YpSDDDDD08wSsh6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffaaf11b111b49e89d847d6ed10de180_JaffaCakes118
Files
-
ffaaf11b111b49e89d847d6ed10de180_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 386KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ