Static task
static1
Behavioral task
behavioral1
Sample
251fe17b00a421fba0974ced3ab33f29_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
251fe17b00a421fba0974ced3ab33f29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
251fe17b00a421fba0974ced3ab33f29_JaffaCakes118
-
Size
72KB
-
MD5
251fe17b00a421fba0974ced3ab33f29
-
SHA1
eff4181441eff920866d57c589bf605cb586c5e5
-
SHA256
5c227b471a960c6bdb23125737a69563900c48e6fa35a0cc9fedd9a8b6089d6d
-
SHA512
98c47b144f717229d5e7519ce3746c33cf032d387017458e8d9a4ad009defe66ca89498827b5e649e9f5f83b4a681550b02d58a7f3a8815cccf828189133274c
-
SSDEEP
768:gLf9iObKZtwbylJ440D1xjgAfU14a0zUb9PtPabPkyvYyKraOMLvJjo7G/xSIio3:oFXbQtw0JoED150QRFSTe2LhiGg3gD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251fe17b00a421fba0974ced3ab33f29_JaffaCakes118
Files
-
251fe17b00a421fba0974ced3ab33f29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PATCH Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.$H@D0W Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE