Static task
static1
Behavioral task
behavioral1
Sample
acbffa0d0f6ac501a225cde1f8c8ff63_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acbffa0d0f6ac501a225cde1f8c8ff63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acbffa0d0f6ac501a225cde1f8c8ff63_JaffaCakes118
-
Size
196KB
-
MD5
acbffa0d0f6ac501a225cde1f8c8ff63
-
SHA1
8f37cf1943c36a7723e9a42b10922ca0b922b1ca
-
SHA256
77a2e75de7fba04900c166557dfee0471a4342acb0d4788b20372a1b07d11944
-
SHA512
fd7e2b806c5a129c7f3c0aab4651ad39842c403acd9179edffdc286fb5974c9bf0e16def73ff48a1c7cbcb6bd449b6ac26d5f9ea884ec75742c5f9fa74e2e31e
-
SSDEEP
3072:Sk/DeV0dDLSOlFN3pneMrfpcW+Ym4XlDcPLT2AMCyJqidWCyUOkme5dw+jIRp:nSOR3JeMrJm42PLjMCyZIhkmIaKMp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acbffa0d0f6ac501a225cde1f8c8ff63_JaffaCakes118
Files
-
acbffa0d0f6ac501a225cde1f8c8ff63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ