Static task
static1
Behavioral task
behavioral1
Sample
cf4fb38f35b160f9c9e05326413a899a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf4fb38f35b160f9c9e05326413a899a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf4fb38f35b160f9c9e05326413a899a_JaffaCakes118
-
Size
172KB
-
MD5
cf4fb38f35b160f9c9e05326413a899a
-
SHA1
875c94fc3c054a78c01e829d1a5980c33bb21b52
-
SHA256
32494fb5e482bb5e5e5addeba0fd3047d70d4a32a74383750e5a44981c69c94b
-
SHA512
ab608dbac1c8344a68aa23efe1a42ed256df6b05b20a5be28e249e39a534600b3ef0d29b8dd874b08a09b063233ba5b7ae17e50f7b27a90a3e5def29d1e2ee5b
-
SSDEEP
3072:JuVsbhircirzIrZbNMl2vwzowro+ZvSuplYGq1fdwoCf1/2JByk6XLH:JuVUUjwolg4owroOvHlq1t423ykkL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf4fb38f35b160f9c9e05326413a899a_JaffaCakes118
Files
-
cf4fb38f35b160f9c9e05326413a899a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 438KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ