Static task
static1
Behavioral task
behavioral1
Sample
cf35ecde46757a00d024fa331353fc55_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf35ecde46757a00d024fa331353fc55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf35ecde46757a00d024fa331353fc55_JaffaCakes118
-
Size
1.1MB
-
MD5
cf35ecde46757a00d024fa331353fc55
-
SHA1
a1fa46475b2becf864b04dea1518d9d34d1df655
-
SHA256
5390591501a005740cdb969482f298d6db662ba1def565ea3ab6e9000ca659d1
-
SHA512
8c9f806816e7e13496e79694b89743ae4eb60489dfe2b20bc3eaea8a281302d2e5fdcb74691b29fadf10db3dcf6ae831d505d6055fb9dc8bd734270aa9aeb623
-
SSDEEP
24576:1ZUcq+agJMmfKnKHiZ7Fyctmpc1NdR83e+gQmXiGrpXQ:gOamMmCsa7Mc1NQ3egmZXQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf35ecde46757a00d024fa331353fc55_JaffaCakes118
Files
-
cf35ecde46757a00d024fa331353fc55_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 194KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 403KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YAN Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE