Static task
static1
Behavioral task
behavioral1
Sample
f4e0c0e65f9e0f874c1e8b11395eef46_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4e0c0e65f9e0f874c1e8b11395eef46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4e0c0e65f9e0f874c1e8b11395eef46_JaffaCakes118
-
Size
128KB
-
MD5
f4e0c0e65f9e0f874c1e8b11395eef46
-
SHA1
ab5cf7d27de440522a144ba93e771b347f3f3202
-
SHA256
c3ef5805f51109eed502516724f359e0e55fdf75bd4f47a08ddf666d2ed7cbd2
-
SHA512
6a7f0f953e8f7984ccf4cca65cc879346fc50ad5b145a031f8af0608192a258e50dcc8fec4ec24765cafab8f9b19d01dcfc552548c7d5d22066523cddd3de0e5
-
SSDEEP
3072:K5K/T/o7vABF5AGdhI98WwAXjMk6sgk7KabwEuEC:K5KrakFCGdVWXtgkmabwEbC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e0c0e65f9e0f874c1e8b11395eef46_JaffaCakes118
Files
-
f4e0c0e65f9e0f874c1e8b11395eef46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
w2 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pu5xhrt9 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE