Static task
static1
Behavioral task
behavioral1
Sample
f081b0fa265f0d8dfef5b589be4119c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f081b0fa265f0d8dfef5b589be4119c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f081b0fa265f0d8dfef5b589be4119c2_JaffaCakes118
-
Size
22KB
-
MD5
f081b0fa265f0d8dfef5b589be4119c2
-
SHA1
c242ca796ff0b8832c04e0ef321ebea228961d33
-
SHA256
e3fe2a91dfc627f8d213eae65c358c23752f1c960288e186527b43011a1ae118
-
SHA512
114ff8dfcccbeed7e86997a082a9bfba75f7aebc83299eaefc192bb86d890d9c2a230c845acbdc9a0fdc7ea4d056535c327164c4d8aa1f9a249a74ae6be2963e
-
SSDEEP
384:1P1uyB0SPXQp3UTIRVcosxqb5WmUfkAZqLbP9k2UmXeaoWPR9ZvZia3O0:1PQyB5gp3UT9x0Y/ZCblkXmXejur6a3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f081b0fa265f0d8dfef5b589be4119c2_JaffaCakes118
Files
-
f081b0fa265f0d8dfef5b589be4119c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ