Static task
static1
Behavioral task
behavioral1
Sample
cfa7b46737a05f65661999f2517a38cf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfa7b46737a05f65661999f2517a38cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfa7b46737a05f65661999f2517a38cf_JaffaCakes118
-
Size
78KB
-
MD5
cfa7b46737a05f65661999f2517a38cf
-
SHA1
86e15f1de4a672ace5e42d0c3bda6603e336947a
-
SHA256
5ac964f1275053fe1f33df564343f9ec10ceed6d38f5701f20285d90afab1492
-
SHA512
e6545ea2f0541dc4fa649c4704e47c198cbb175df4c30bc9b484666201bb72e093c4fe0242125fcf04ae9e1f49e0a302b262dee4813e205fd1a1caa4e7855e69
-
SSDEEP
1536:hRvnxZ9mdD+griR4t0ROkOdr1u2L0p0+fLm5Ty34qeMjZE1vCdSK:7xZAdD+PitLkOdU2L0pffLmxy3CckvCn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfa7b46737a05f65661999f2517a38cf_JaffaCakes118
Files
-
cfa7b46737a05f65661999f2517a38cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 704KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE