Static task
static1
Behavioral task
behavioral1
Sample
f705ca0f5eb3a25145ea6ef448fcb4c7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f705ca0f5eb3a25145ea6ef448fcb4c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f705ca0f5eb3a25145ea6ef448fcb4c7_JaffaCakes118
-
Size
1.3MB
-
MD5
f705ca0f5eb3a25145ea6ef448fcb4c7
-
SHA1
e2da3311b5165e0444883e35fd7358cda7c0314d
-
SHA256
4a691734aaa0dfed22bf2fbd93af36ddd49f5c4f61f9b0520690e9a37a781cfb
-
SHA512
ff78ad2f80406cb6cd0cc008c20ca7634eecb3ba1aac7249b64acdd9b3783e32bee3ffe126d636c21386a10c4b0032b57ce6a340fc2a437a9cf9c3aea7f2d3d0
-
SSDEEP
24576:YMv+jq4/U31Tr8IHPyLssYcrwe9ipphkBBmUuzIFLnCjGglG1/GNi/n:YM4fM3przyBRwe9trbvgw1cq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f705ca0f5eb3a25145ea6ef448fcb4c7_JaffaCakes118
Files
-
f705ca0f5eb3a25145ea6ef448fcb4c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.y877p9 Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.81g2os Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7e3n7l Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: - Virtual size: 3.0MB
.loader Size: - Virtual size: 432KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE