Static task
static1
Behavioral task
behavioral1
Sample
ffecc84fee3038604a414cefe3983baf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffecc84fee3038604a414cefe3983baf_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ffecc84fee3038604a414cefe3983baf_JaffaCakes118
-
Size
102KB
-
MD5
ffecc84fee3038604a414cefe3983baf
-
SHA1
a4686b07106affbe4df4464fb192ef9af96ea652
-
SHA256
11ffba47fd4262c6fea2dc09e253d17f5faffa2117d4d6133b3480a3c04de5bb
-
SHA512
94fbf3ee91f36574c8f8e5132152942b4f5ed7ca426b48772164ca1f203f7f45a60030d699a1cc7b18f597ef1ae651028ebfc770fe0f9244964340ecc88ccda6
-
SSDEEP
1536:7W+bA2IBMniUUIgKSXdgT1GfeoD8FQ2C/yyHH5gfzZTkuTGRktasXllonn14ZqiM:qUA5BMi/E0fr8FQYykzKPeako14Zpw7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffecc84fee3038604a414cefe3983baf_JaffaCakes118
Files
-
ffecc84fee3038604a414cefe3983baf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
3o37n3z0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3o37n3z1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3o37n3z2 Size: 217B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE