Static task
static1
Behavioral task
behavioral1
Sample
f708c571dc8b08c13ff6f47b2056aa21_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f708c571dc8b08c13ff6f47b2056aa21_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f708c571dc8b08c13ff6f47b2056aa21_JaffaCakes118
-
Size
1.9MB
-
MD5
f708c571dc8b08c13ff6f47b2056aa21
-
SHA1
d8deb29170da9edf2c0f0d13465a4052e35d94c9
-
SHA256
2ec2e131c8fe341142ef2f9ae2e693b852b07b2fb63610931c25cea04f1ec28a
-
SHA512
0b8246b6a52aef3838aa616ccdcf6a00898dbd9c0b88f3f08a52b16d412fe56fa7543b339949cf660d1b73b19deccdea31dca4698434899016fe9ef731025576
-
SSDEEP
49152:M12OPBIwOjnJ6gM8tkpo9sqqhGc4DcUcN9:M1dP2QXoqqU12tcN9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f708c571dc8b08c13ff6f47b2056aa21_JaffaCakes118
Files
-
f708c571dc8b08c13ff6f47b2056aa21_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.30g2ib Size: 3KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 555B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0z9e84 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1jt3ks Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: - Virtual size: 3.0MB
.edata Size: - Virtual size: 460KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE