Static task
static1
Behavioral task
behavioral1
Sample
cf1d3549f80b240479f704aa248a2dab_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cf1d3549f80b240479f704aa248a2dab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf1d3549f80b240479f704aa248a2dab_JaffaCakes118
-
Size
97KB
-
MD5
cf1d3549f80b240479f704aa248a2dab
-
SHA1
08091950cbe1bc7bd0027f30ff211057719c0b7e
-
SHA256
b00aecdef3a278730d0037f6c0295f344f756e4441b356381dacd646e45eade5
-
SHA512
e5f6005bc18a97aa70270359bf0acb6decd0c17b681d9ac1c78d188d9f7f5b0b819b012147cb5791a20c89463097c657a53a0b0f99204b11d961b2e55783f580
-
SSDEEP
3072:Mu34lGmMWPoHj52N4tiGEGPJ4RxIHg+8fX:ZIxMWkj52N4tiGEGP9HmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf1d3549f80b240479f704aa248a2dab_JaffaCakes118
Files
-
cf1d3549f80b240479f704aa248a2dab_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 645KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ