Static task
static1
Behavioral task
behavioral1
Sample
f0420fb7c604920df641f23509b808cb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f0420fb7c604920df641f23509b808cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0420fb7c604920df641f23509b808cb_JaffaCakes118
-
Size
29KB
-
MD5
f0420fb7c604920df641f23509b808cb
-
SHA1
bdd94d65e6936cf485d8a0c6b97e9cf0e160fcfe
-
SHA256
82f0bc81c01d7754126d2ae89fbfca0a2dffcdda5389e85f6c6b7d4bf3cc675a
-
SHA512
5fa1b6e7d861df25ed7612fc39192b7818efb922c0a56bc74c7279d26cf6e0e373a65f5cff99432c6f4c5b7e63b2310b8befe328034b3fd549b4de4706a867e9
-
SSDEEP
768:b3tUt6Ys2kfU1e2T+kk0lOeYb+hehkvSbJlFlxnbcuyD7UKu5:bCHsJfwPT+kkAlK+hIkw3Flxnouy8J5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0420fb7c604920df641f23509b808cb_JaffaCakes118
Files
-
f0420fb7c604920df641f23509b808cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE