Static task
static1
Behavioral task
behavioral1
Sample
cf199b87199f06e161a036e3a48f4ee5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf199b87199f06e161a036e3a48f4ee5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf199b87199f06e161a036e3a48f4ee5_JaffaCakes118
-
Size
1.8MB
-
MD5
cf199b87199f06e161a036e3a48f4ee5
-
SHA1
c931f9ecc16626d58741eb860c28cb16a1b71c91
-
SHA256
c9713d2aa377c138396c81faaaac01d145ec1a1cd7aedd1a9c37148d9a975d9a
-
SHA512
19f8517b898d1e9a8c14d6bcb57af95686da8bb2727f55d3f6e98aa95eed57885e20f49a5d02debfa6ab86e607b80eda04e922f607d19321a35cc15a9f4653f0
-
SSDEEP
24576:g/KPyfBx07wBK4YKhr8U4+TpWm09V0PIpT3PqPa4YOrKEsxnmRedWdXyRxf:gtggYor8UtTpWm0QwW5YpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf199b87199f06e161a036e3a48f4ee5_JaffaCakes118
Files
-
cf199b87199f06e161a036e3a48f4ee5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 28KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ