Static task
static1
Behavioral task
behavioral1
Sample
cffbc73eb60c9d3f9fc1ac4930c7bb2b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cffbc73eb60c9d3f9fc1ac4930c7bb2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cffbc73eb60c9d3f9fc1ac4930c7bb2b_JaffaCakes118
-
Size
15KB
-
MD5
cffbc73eb60c9d3f9fc1ac4930c7bb2b
-
SHA1
94e77e559d1cbfa20cbf1a85ba46d90bf784eaa2
-
SHA256
c2be2cfd44046be14f429c55a27c990bec30895509399b521b46bfd4218eeee8
-
SHA512
7840fc30e1cf60c76413a9b8f8923c1bd4298a82cf5cd1eef63372462acdd103e1c52fc876302d63654ed63433abed5cb163bdba5f2887f1f711304c46471ffb
-
SSDEEP
384:DsYWoZuTSgxEiRvZVt8mT1XXsAkDc2+3Mv:DCfTFHRhv8mT1sAkE3Mv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cffbc73eb60c9d3f9fc1ac4930c7bb2b_JaffaCakes118
Files
-
cffbc73eb60c9d3f9fc1ac4930c7bb2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE