Static task
static1
Behavioral task
behavioral1
Sample
cfd620957abef4e2cc57c92b532ac5a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cfd620957abef4e2cc57c92b532ac5a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfd620957abef4e2cc57c92b532ac5a5_JaffaCakes118
-
Size
135KB
-
MD5
cfd620957abef4e2cc57c92b532ac5a5
-
SHA1
5cf36b638db9ae8e56c8d5507df2353f775be741
-
SHA256
220d6b7189b2d6d851bdbdb950472ee874990fb6651d2a7effb97e30106fb4fa
-
SHA512
19361c13f426e9282e3ed1568e4956e1c0333e344e9ef24517148068f865152be154c011a8e5d3551490a0542d8ed62872d42a213373f54f9e3bd5f2d2eb0cb2
-
SSDEEP
3072:UbIJ+oh8/D4KlTsbrMzcV2S5KhifyCTxX55aHnDC1Y:UEJDs7d4fvxX5wn2K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfd620957abef4e2cc57c92b532ac5a5_JaffaCakes118
Files
-
cfd620957abef4e2cc57c92b532ac5a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 132KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 699B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 512B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 352B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ