Static task
static1
Behavioral task
behavioral1
Sample
071cb8f6e1954daa20cb416fb68bc5ec_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
071cb8f6e1954daa20cb416fb68bc5ec_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
071cb8f6e1954daa20cb416fb68bc5ec_JaffaCakes118
-
Size
13KB
-
MD5
071cb8f6e1954daa20cb416fb68bc5ec
-
SHA1
fbe7052b6e6c5cde7f30c31573021bfe97fca610
-
SHA256
7cce8bcdbf4da2995d26ac2fcaaec052d335fa0e15d52eacd5b19ee01473f30c
-
SHA512
a403b057d02f79ab0a43326ced52582edc1c2ae8fbb5e1211764651b5d73701e56e9fbdca77d07b52a1f4d60cd934eb8cde86e8d0bb68ad9c4b0a53aa9c0121c
-
SSDEEP
384:zLR26p+ib/AcxS5q7K60MXrlsJyeG18tWN:zLR26p+YFIkd35sBsN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 071cb8f6e1954daa20cb416fb68bc5ec_JaffaCakes118
Files
-
071cb8f6e1954daa20cb416fb68bc5ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buojhq Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ