Static task
static1
Behavioral task
behavioral1
Sample
c1ae22ed5fece67455e9463a7d1dc7a9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1ae22ed5fece67455e9463a7d1dc7a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1ae22ed5fece67455e9463a7d1dc7a9_JaffaCakes118
-
Size
296KB
-
MD5
c1ae22ed5fece67455e9463a7d1dc7a9
-
SHA1
3add2d1b712668eb0a48d2ca36c8aab76aacc853
-
SHA256
c277a37b9e3e1ab3c607a3db1bee8f5b049e7f8286aeb35a37534af861e7c87e
-
SHA512
4242295a7ebf9624fbe17d5047c69dccefd6fa76e301918045805c73927a4f951d7a01b1255b5e9efc495e2f75b2d727b7e07b01bee4a94c60279ad6df00532f
-
SSDEEP
6144:b+yTFM2qLCfX1Tge0I7YM/EYEZwP9Xpv6jyhVx:NF3qLwge0I/ZESFt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ae22ed5fece67455e9463a7d1dc7a9_JaffaCakes118
Files
-
c1ae22ed5fece67455e9463a7d1dc7a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ