Static task
static1
Behavioral task
behavioral1
Sample
cf82c669e5e2c1fe6703b3bce05e7656_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf82c669e5e2c1fe6703b3bce05e7656_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf82c669e5e2c1fe6703b3bce05e7656_JaffaCakes118
-
Size
1.3MB
-
MD5
cf82c669e5e2c1fe6703b3bce05e7656
-
SHA1
f6d336dac3e7373f4a1eeca3becdffb0924906c5
-
SHA256
d3908568b5b99d9bd95e456a19a84164ddd2463a40355defde72d00df2c4a006
-
SHA512
d176b395ddbc7045810c837442d251ec5024ec452d00048ee0a4a03de536688b925ced51f29e1cf0e2cd61fa8764285d548397574ec75424b4b4de1b50303f3c
-
SSDEEP
24576:wEFfD/h2rV2BJp9zHLDvhXibwiP4Btg1GJHh6bIHBK2gw6ZFmpEeUEp38H:7FLcrV2t9zrzhXGwC420HysyJ7UPUENy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf82c669e5e2c1fe6703b3bce05e7656_JaffaCakes118
Files
-
cf82c669e5e2c1fe6703b3bce05e7656_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ycjoft Size: 3KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tfrobi Size: 62B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pkxapw Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ