Static task
static1
Behavioral task
behavioral1
Sample
02d1aa3f62156ecc0474e08ef2f0ec4f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02d1aa3f62156ecc0474e08ef2f0ec4f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02d1aa3f62156ecc0474e08ef2f0ec4f_JaffaCakes118
-
Size
272KB
-
MD5
02d1aa3f62156ecc0474e08ef2f0ec4f
-
SHA1
4e7e57a20c2d969b4178f1c719f6ac90ad0f8db3
-
SHA256
3f7097432996b9c67aa639c6099d2df624736219b4650fdd2e92236d0ea93593
-
SHA512
77e49fc5a0576245c20d3fefbf4faf2ab5fbd7dcb8c1f4192d07ad555992c0cb94ee4280451a14f5a1d2ebde902e29a3d2919e82f1e1fa1c2228464e563b9fde
-
SSDEEP
3072:eltevn8gD6djxq+J1TdV+YyhH5CfEglyHCuEfabvtBbJGLPvUl+HryFswxW3v68t:ePC8geBf1TvCHsMt8ctboLnC8TuLg08
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d1aa3f62156ecc0474e08ef2f0ec4f_JaffaCakes118
Files
-
02d1aa3f62156ecc0474e08ef2f0ec4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KaVgO7Sq Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hEXr75zI Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Jc7Jl1ZX Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pWQy0mQk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wxkUzosd Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Jc7Jl1ZX
-
hEXr75zI
-
pWQy0mQk
-
wxkUzosd