Static task
static1
Behavioral task
behavioral1
Sample
0841fdddd2f9a7c263a11ec998a97c9f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0841fdddd2f9a7c263a11ec998a97c9f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0841fdddd2f9a7c263a11ec998a97c9f_JaffaCakes118
-
Size
21KB
-
MD5
0841fdddd2f9a7c263a11ec998a97c9f
-
SHA1
526ea4d7024e1e7f9d9d555b94d3c60627c6216b
-
SHA256
f8b65f39e02f51e89630ec0579b98d14bf34ee4485f4adcc4428575b123e6ae0
-
SHA512
571543b24ab2b94c33864e8ede6e167f4ca396db1f0f0a9bd157772c8c15fb386badc1f84807472438024f1458fa9a2ebef57ef3eb72b14495d684e238392b86
-
SSDEEP
384:Cg3H4m2T2K9DOtvCQsf1mzH1iJa3VkOi3KvUPne3y2hjZ/Fvk3ziCEZiND0EpKNw:3H4m27Ynsykt64Gy2P/5CQKD0+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0841fdddd2f9a7c263a11ec998a97c9f_JaffaCakes118
Files
-
0841fdddd2f9a7c263a11ec998a97c9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE