Static task
static1
Behavioral task
behavioral1
Sample
f042bf9ae750034b886bab4a441a9a87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f042bf9ae750034b886bab4a441a9a87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f042bf9ae750034b886bab4a441a9a87_JaffaCakes118
-
Size
213KB
-
MD5
f042bf9ae750034b886bab4a441a9a87
-
SHA1
93924a6899153f820c7bd83d6009879c6560a8c8
-
SHA256
d582f77deb6256421872cdcaded49cab3b1708b24f9c66b4c3bbdf30e4605c74
-
SHA512
c2caef8ac1d551d5b89193613ffb8e5cd0c2b53752828522a3cde308a5acabd20e7b17a6c61d5cb6df73ff895a2f2ba46d7704b1c6ea18bbc9adf29b016e2930
-
SSDEEP
3072:7efkZZvhriWYnVHuvM0TIIH5Rt1K24xaPtt4n6IP/pR6seVlK8KgR5ePxprQ:7jLh+WYnVsMMZ9mWXNIPzze7Ogqp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f042bf9ae750034b886bab4a441a9a87_JaffaCakes118
Files
-
f042bf9ae750034b886bab4a441a9a87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE