Static task
static1
Behavioral task
behavioral1
Sample
f00804fe3af28ee1f0ee57817d46b7a8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f00804fe3af28ee1f0ee57817d46b7a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f00804fe3af28ee1f0ee57817d46b7a8_JaffaCakes118
-
Size
2.9MB
-
MD5
f00804fe3af28ee1f0ee57817d46b7a8
-
SHA1
0dabe27b3c79619da508ca407f475f9bc20907b3
-
SHA256
d70cb196df8fa5bb8dc8c01f4dfda766b15271031ccb9094d6e209b3b9bd6bd9
-
SHA512
5d29cd71f17b832d024b2da0bef060799e1f876ac7ba9f7b4dd305ee70a936f5ccfe423788766ec5b1b4fd816fb36a7389a901f26b448b6dcd029c7022acb8c9
-
SSDEEP
49152:JlN41P4lsuUrVLGJ3dGt90P0UO3EWIptxloCFuGb+kROfWfhvPctrUxpGnKN51VF:JlN494l/iGJNGt9TUO3EWILxlrs46fWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f00804fe3af28ee1f0ee57817d46b7a8_JaffaCakes118
Files
-
f00804fe3af28ee1f0ee57817d46b7a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE