Static task
static1
Behavioral task
behavioral1
Sample
cf64a1717f270346f8511db71f5f1844_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cf64a1717f270346f8511db71f5f1844_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf64a1717f270346f8511db71f5f1844_JaffaCakes118
-
Size
126KB
-
MD5
cf64a1717f270346f8511db71f5f1844
-
SHA1
10586ee409ed1c476d68fd91fb4c8738a81fc5f2
-
SHA256
b2b4d4080f76484c01fd00ba67716ea48cd4beebabdd3be795031506484f0a53
-
SHA512
3c170bcb778177be14c75c435e0e0c258e39f8588965921c439db8e87a4324e23afa9a9aca789ffbc9ccb52bf936269e90a5b7122f1052db542ef365da9f30f6
-
SSDEEP
3072:GQsQCiShn/MPYr1iqxc/7guB/sLkRg3zyAPkr:FCDeYBiqxnzLkRr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf64a1717f270346f8511db71f5f1844_JaffaCakes118
Files
-
cf64a1717f270346f8511db71f5f1844_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ