Static task
static1
Behavioral task
behavioral1
Sample
f01f0524425369e99ded68d0ca34868f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f01f0524425369e99ded68d0ca34868f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f01f0524425369e99ded68d0ca34868f_JaffaCakes118
-
Size
131KB
-
MD5
f01f0524425369e99ded68d0ca34868f
-
SHA1
6aeb122258922e1364f9892b86538546d1a5bf7e
-
SHA256
712abd640f5e929f027b0b20ccfd2dc0ab0eb988040a302c719a9bb81ff3260c
-
SHA512
2cbec779da08d06d5d0d2dc9896bf45e7b99eaa69012f1814c07ce7bb11d11d95d82f37292eb987afc553fb8ffa7bcb8ac99b874d3283a49244e5cb731daa19c
-
SSDEEP
3072:lEjr57kkcTIuCSJ7vogm+tS0tOhJVkMR3uyKCn4VpzAVCJACchy:uX57DeRDoa0hMw312ACCy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f01f0524425369e99ded68d0ca34868f_JaffaCakes118
Files
-
f01f0524425369e99ded68d0ca34868f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.upx0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE