Static task
static1
Behavioral task
behavioral1
Sample
0f4cf1c8989cb88b16390c4f72e14cf9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f4cf1c8989cb88b16390c4f72e14cf9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f4cf1c8989cb88b16390c4f72e14cf9_JaffaCakes118
-
Size
4.1MB
-
MD5
0f4cf1c8989cb88b16390c4f72e14cf9
-
SHA1
fd5d420b0ef066c35620138b82c6393aad0436a2
-
SHA256
7539c7fbb162377c31296744f16a740fed82f08252c28a9727423b5a24a1a703
-
SHA512
477904a487633799eafa8af2303c386c7a274001f4dc4cefb7c539367ee9e38c658a34695d565f69a9883413d03b54ac2cafeffdd52c83ce67f044f6ae048e5c
-
SSDEEP
98304:kQJYgAI/xSmMHkAO8qSI7CTWwWOdb8KrUFvYQ3qGgVw:kQJYgx/MjxOKnxbkmQ3qK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f4cf1c8989cb88b16390c4f72e14cf9_JaffaCakes118
Files
-
0f4cf1c8989cb88b16390c4f72e14cf9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 18.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE