Static task
static1
Behavioral task
behavioral1
Sample
cf66d99ffa20f3d25970c38e65858e8a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf66d99ffa20f3d25970c38e65858e8a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf66d99ffa20f3d25970c38e65858e8a_JaffaCakes118
-
Size
1.7MB
-
MD5
cf66d99ffa20f3d25970c38e65858e8a
-
SHA1
4ea728c8a01cde78afad28ce0185138719b1b65d
-
SHA256
3cfd7f0d21c02904271e04112ae6ca89333f04e2c35f9caf92477f2046658526
-
SHA512
86e06d832ab43f28ec8ab02c5602c30818d73e421e3db3b96d85a5d7e1107fa510bd93639dbbf4c7528b31b6df714e7563495dd0377373b3259c387bf4e8a636
-
SSDEEP
49152:ARE7WMOh6vGO4Z5/TmAhPxAcTI04Ewnq4pfu85z+8wguNo:ARLtO6TLhZzdGq4tz+8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf66d99ffa20f3d25970c38e65858e8a_JaffaCakes118
Files
-
cf66d99ffa20f3d25970c38e65858e8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 21.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE