Static task
static1
Behavioral task
behavioral1
Sample
f4f30666452238855da5c47f7c95c169_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f4f30666452238855da5c47f7c95c169_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4f30666452238855da5c47f7c95c169_JaffaCakes118
-
Size
12.6MB
-
MD5
f4f30666452238855da5c47f7c95c169
-
SHA1
c18b7d0b80681fc10dc3af1ba4f9002ab183c401
-
SHA256
fcc2038bee92f6c8e1608a3bcc2cc2abd221c417dc8fa19992210af9e99d096c
-
SHA512
966220db2e1d5161d4df74ab73b896a864cd139176e1b4cde49c9205eeb530719c4904f9461901cdd5cd8df80f3cadb4632d02f81011cd3c7e939b4f1b44db1a
-
SSDEEP
196608:oSaRjhGctyHjBx1HNhJcvJWjGnN7U3ZSNhunM:obRjhGctwjBx1tncvMjGnN7U3ZeA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4f30666452238855da5c47f7c95c169_JaffaCakes118
Files
-
f4f30666452238855da5c47f7c95c169_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12.6MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 874B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ