Static task
static1
Behavioral task
behavioral1
Sample
02f901580374a04fefa85b250feb13b7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02f901580374a04fefa85b250feb13b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02f901580374a04fefa85b250feb13b7_JaffaCakes118
-
Size
464KB
-
MD5
02f901580374a04fefa85b250feb13b7
-
SHA1
fbbfc8b672593d04ce25f86a0f110516f08d14be
-
SHA256
e17e7a3ae0a6d26cc711d90e5167f4e2248ae3f9f14bc1e9e57b6b0dff9c1059
-
SHA512
2f2a9522226b04448a4123013e7bc1b15a21fbbfbb06526679b5b21e9c68647fb9e46f7f09c06e9341078a741368c5a42791af9ffd6d7264e2955df9acaade13
-
SSDEEP
6144:vsTLko5jaT6bSW8sDlmSCF3CioBbrLyKNfrcj6qlpv7bLHdmps000bxIDsk:vsTLPgM75B2oBvLnc6qjbRKL00bxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02f901580374a04fefa85b250feb13b7_JaffaCakes118
Files
-
02f901580374a04fefa85b250feb13b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 128KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hellson Size: 331KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE