Static task
static1
Behavioral task
behavioral1
Sample
cee0b08708ad38263b7c74b18e1197f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cee0b08708ad38263b7c74b18e1197f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cee0b08708ad38263b7c74b18e1197f0_JaffaCakes118
-
Size
3.1MB
-
MD5
cee0b08708ad38263b7c74b18e1197f0
-
SHA1
154f374185d40aea36587b79325bdbda69dcd621
-
SHA256
a83cea19041b1fc601b6af660c8ab8b1cb9a3905eee3dcec7072f36f4c30d9eb
-
SHA512
f6ab75addead22f9fec53fa5a39fc2163f6f097ba35bba689b849e4fd70327c6e3d84560bfbb09d76ad3bcb386550fb04669e634b76cebe86123f0fb93cd0dbf
-
SSDEEP
49152:bIerQZbd2uerQZbd2oerQZbd2uerQZbd2oerQZbd2uerQZbd2pg:9rQZYrQZKrQZYrQZKrQZYrQZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cee0b08708ad38263b7c74b18e1197f0_JaffaCakes118
Files
-
cee0b08708ad38263b7c74b18e1197f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ