Static task
static1
Behavioral task
behavioral1
Sample
f280e78060acf27816cd6a3f0bb9984b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f280e78060acf27816cd6a3f0bb9984b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f280e78060acf27816cd6a3f0bb9984b_JaffaCakes118
-
Size
228KB
-
MD5
f280e78060acf27816cd6a3f0bb9984b
-
SHA1
2df14573f920f9ff35037a97f243a3fa0772564a
-
SHA256
1d7af108665218e17107f885a8bc1640e1f5dd7c23c7a4f936973f95bfb5ab85
-
SHA512
a9facc50da7e51f75aaf447ed4cf998d8ed69ea20414814dd7fdf738e62a14588da226e5681c80ee89d234c21d3a0e0ce29ea56049759dacffc445e5deb79b9c
-
SSDEEP
6144:0jDvmjP42nxIMrn12VrW1GqIwAng3gIl4bVmWjSbhqwJX+OR:4Vlm2JHXIl44p5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f280e78060acf27816cd6a3f0bb9984b_JaffaCakes118
Files
-
f280e78060acf27816cd6a3f0bb9984b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
afk1 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
afk2 Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE