Static task
static1
Behavioral task
behavioral1
Sample
c1ad4b8d3ddefcdd935535340faa61f6_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c1ad4b8d3ddefcdd935535340faa61f6_JaffaCakes118
-
Size
3.1MB
-
MD5
c1ad4b8d3ddefcdd935535340faa61f6
-
SHA1
5088dd791a630694c946e63738b32a0d25389589
-
SHA256
a3e9e2f9937ee28447368f488948c5627b6bb4bd8ceb48e7e4bbcf8f086302e2
-
SHA512
6067cf6099303d37a5d878b2547177a2bd03f1db83fc231b13139b6fec911c877acc7ff839f51e7c19ecd4764a65debbd362557772f8c9a4c92f79d47dbbfb46
-
SSDEEP
49152:ZF8wpHQ/vU8+mb8WdsKlTz375iOn2aueSg3LbC/5w1jorIuqOd0Xtzuqxg91aY:ZzE88rbJdsKlUOn2ubg5Td0XtO9wY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ad4b8d3ddefcdd935535340faa61f6_JaffaCakes118
Files
-
c1ad4b8d3ddefcdd935535340faa61f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yidjnesw Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.4MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ogxknewa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rphuidow Size: 658KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rflaaukz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE