Static task
static1
Behavioral task
behavioral1
Sample
02ef9464b7b4ea8b9cda0853a0496ff4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02ef9464b7b4ea8b9cda0853a0496ff4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
02ef9464b7b4ea8b9cda0853a0496ff4_JaffaCakes118
-
Size
68KB
-
MD5
02ef9464b7b4ea8b9cda0853a0496ff4
-
SHA1
b32b56cfae82c7f0bf2844feb7770f8e364a1543
-
SHA256
94dcdd6b2080898625c0828294bc4341d3040adfc78355700d42c4322a566c17
-
SHA512
f421b9ff1852d71dd3d9beaf9d23e4f5d9091d3eedda66ac38303e06b51f14b2324eeba2eadc9842a71f6a1781ee73c892fa472e49bcabd83de83b300c56f460
-
SSDEEP
1536:c+1FX5fJ5OU1aADYDdqKVZ/MVfMSdnurClVvos1m7hr5uo:cw/nx3Y5qK8VHturClVzU55P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02ef9464b7b4ea8b9cda0853a0496ff4_JaffaCakes118
Files
-
02ef9464b7b4ea8b9cda0853a0496ff4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE