Static task
static1
Behavioral task
behavioral1
Sample
cf1fe797095b2c6622bba4b3397d5a3d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf1fe797095b2c6622bba4b3397d5a3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf1fe797095b2c6622bba4b3397d5a3d_JaffaCakes118
-
Size
528KB
-
MD5
cf1fe797095b2c6622bba4b3397d5a3d
-
SHA1
fb09e2ccada6f649e43384a0f6eca7591cb0e2c5
-
SHA256
2908e987f41dc9a2fd307bb1fbb1f832e9781a08736cd746500b1308d2d5c78e
-
SHA512
b0979623f61b493b07cc0979c857ac791f45dadef0d8a0a9b725512c6b686048d39d6346c45136e1fc4ba182a3f5ab5c8da656cf7c7bd89dbb934a43a9c7f877
-
SSDEEP
6144:O5EEsWu4uQfVF8XwddbCdecfHz6mW0KPrdMdX:iEEssx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf1fe797095b2c6622bba4b3397d5a3d_JaffaCakes118
Files
-
cf1fe797095b2c6622bba4b3397d5a3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE