Static task
static1
Behavioral task
behavioral1
Sample
f043e4b02b20808860979e1e10ec048d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f043e4b02b20808860979e1e10ec048d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f043e4b02b20808860979e1e10ec048d_JaffaCakes118
-
Size
17KB
-
MD5
f043e4b02b20808860979e1e10ec048d
-
SHA1
0626e820020fc3a5ffaddadcae0cb437229408cf
-
SHA256
3627541f579d4a312c62c5abb1355ff2c7446e8bc7d1d364603bc229272e1c7b
-
SHA512
4fe91472f29aaaf7f530dbd120db99d6e4e4d6febd3590e9242a9b50eee7412dbf9f592d15d226982cd2cf05bee0659f2d72b4463ec9acd33202153189507924
-
SSDEEP
384:mOW/WpS4LGOuF7f0y0eyXBgEsEv8XfR2ux7t3Hd3ZP7fY:BTL+7f0/lgrZx7Vdx7w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f043e4b02b20808860979e1e10ec048d_JaffaCakes118
Files
-
f043e4b02b20808860979e1e10ec048d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
{YVt0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
{YVt1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
{YVt2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE