Static task
static1
Behavioral task
behavioral1
Sample
9fcab6fbeb3248cbcbf4937c5bfaf061_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9fcab6fbeb3248cbcbf4937c5bfaf061_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
9fcab6fbeb3248cbcbf4937c5bfaf061_JaffaCakes118
-
Size
576KB
-
MD5
9fcab6fbeb3248cbcbf4937c5bfaf061
-
SHA1
eb6214091bbc8b9d3a359142266bccf8ccd717ce
-
SHA256
e9516a463f29b7162a45b6684c7efc6f495f3f5f0cc411b4878d798793bb5c4d
-
SHA512
280c06e53ea014d2456dbec5aa4b9831e24058b4b8304d10190ed3bfdeab493bb9e210cdac12266f64823a7ced5a0d275bfd5f6bf0002382cf949a2665a02c44
-
SSDEEP
6144:UZfec9EbXDk6Rk/BEKWnmy+g4IE2E5uHOnB7nmy+g4IE2EhdrG1VVE+IA:UZWtI6Rk/BoagOnB7ahhut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fcab6fbeb3248cbcbf4937c5bfaf061_JaffaCakes118
Files
-
9fcab6fbeb3248cbcbf4937c5bfaf061_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ