Static task
static1
Behavioral task
behavioral1
Sample
227fb84d3b5c9cf2bc01f6500be64fd0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
227fb84d3b5c9cf2bc01f6500be64fd0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
227fb84d3b5c9cf2bc01f6500be64fd0_JaffaCakes118
-
Size
19KB
-
MD5
227fb84d3b5c9cf2bc01f6500be64fd0
-
SHA1
e6611f46e3d3bcd680398af16891dc4c61cc5dd2
-
SHA256
ac016be721ac725b55d86c04484197fd14b69ca2c20d0795a9a693d46ca770c3
-
SHA512
cbedaa3305bb1020745290c0eb18ee55ae9da14b83dfbc0e7f4f7dded4aa1428c11cbc3488d8bd5d8bae061f68b176702279e6a83376bd3f02424d9e08675ce4
-
SSDEEP
384:CnGfS2vDcKUtWL0yXRtvUEZNIK2Qo+sITspSQzN74OW:cwS2Td0yRzMK2Qo2TcVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 227fb84d3b5c9cf2bc01f6500be64fd0_JaffaCakes118
Files
-
227fb84d3b5c9cf2bc01f6500be64fd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE