Static task
static1
Behavioral task
behavioral1
Sample
09df95ba5ed8f55ec2a8a6b1499fb436_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09df95ba5ed8f55ec2a8a6b1499fb436_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09df95ba5ed8f55ec2a8a6b1499fb436_JaffaCakes118
-
Size
888KB
-
MD5
09df95ba5ed8f55ec2a8a6b1499fb436
-
SHA1
54000558e58447fdfa14b9847c8f0115e5b5ba3f
-
SHA256
f952e6698223a9375b6b07b4d5a04cb5532ddb6c830fa8a747ea5daaf0fb1350
-
SHA512
e9c7113f0ec08c109f67346cb7660d3e70006118a90e99fe94ebcea863b5163606d048fb654c77051a5e5bf549f572ecaa2abc845b2f6c00b72dd75726913452
-
SSDEEP
1536:Vu+iYf0rbhPYlU+0j5PKkoJjnFhD5+U2YPNwj9zj+6AOjNpNe7TYxLkTCkU1VJHU:GYGPsDtJjnD8mwj9G6j7qvwPTXn+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09df95ba5ed8f55ec2a8a6b1499fb436_JaffaCakes118
Files
-
09df95ba5ed8f55ec2a8a6b1499fb436_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE