Static task
static1
Behavioral task
behavioral1
Sample
f701a02a631e2c67eb2a00f435305c66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f701a02a631e2c67eb2a00f435305c66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f701a02a631e2c67eb2a00f435305c66_JaffaCakes118
-
Size
5KB
-
MD5
f701a02a631e2c67eb2a00f435305c66
-
SHA1
6cdbd747b6c8990dc1f5f7fe9c4d3c90e1348cbe
-
SHA256
f199be1b1f4556ea0689b68624f1a7220a0838e080e8254b215c3577931145a4
-
SHA512
55ad62fe5c25140f9ecac068535634fe5f7f85f263f30c4e610f0f36d57d182c62e8d6c9c2b346c32a84e2a38ce5508d22f70e02d984f6297d82a52b9c1dbcf5
-
SSDEEP
48:KnCW46jffrIyDM+20ZiMxmEMlbk3fsmzTNyOjF9vz40VMGnW0sKtGmO3ri5:WCWkyDXizSBzTkkvzPuYWP1P3rK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f701a02a631e2c67eb2a00f435305c66_JaffaCakes118
Files
-
f701a02a631e2c67eb2a00f435305c66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nfJBg86 Size: 512B - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nfJBg86 Size: 97KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE