Static task
static1
Behavioral task
behavioral1
Sample
f4f5f33ebe5f63bb12eb3e36d72816b2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4f5f33ebe5f63bb12eb3e36d72816b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4f5f33ebe5f63bb12eb3e36d72816b2_JaffaCakes118
-
Size
114KB
-
MD5
f4f5f33ebe5f63bb12eb3e36d72816b2
-
SHA1
9fa79626475ade958cd81bc936bc6912a6ab3f1e
-
SHA256
81ee70d8048ba806bbc8bd785eab1124014ec402f49d3c80fb7ef8687defd077
-
SHA512
4f328aa63b7c28e2dbc87464e3fdea9168904f67a7d97c3a2e44d851321add2a6589e6ae2f3da5ec391a97fdc07c6669e8d37ac91c459e0db40197c3c99188ad
-
SSDEEP
3072:/nZhLpeyMLm9ahwCyYMlgO79KBhD6Qzk2A:hhteymm0hlcKOMBpfI2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4f5f33ebe5f63bb12eb3e36d72816b2_JaffaCakes118
Files
-
f4f5f33ebe5f63bb12eb3e36d72816b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
gqRKvTb Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8R35mYFG Size: 1024B - Virtual size: 853B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ELwi Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE