Static task
static1
Behavioral task
behavioral1
Sample
f54645f4ba50579a50dce60c4d33b38e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f54645f4ba50579a50dce60c4d33b38e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f54645f4ba50579a50dce60c4d33b38e_JaffaCakes118
-
Size
7.9MB
-
MD5
f54645f4ba50579a50dce60c4d33b38e
-
SHA1
aeab70dbb6ba489a847d3faeb2c046d0b64830ce
-
SHA256
1de7201570d85b1d98c16470d3e25b4bfe7e9eccfaca0f31fd692915969f9480
-
SHA512
b9070c46f99f1ee9f2b2ab43a2b3ba4a749b519cd73a4b33675b316f7b1c0aebaf46374d894408b44edb1ce0d927a29b50a8aceb9abc9d8b5e9d4b2f3b8cdc88
-
SSDEEP
196608:wYpEh77NmF/293IKDE9WBgiZNraYYUp+R4W5145GqF:wYpfgfGiZUYYUpKN4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54645f4ba50579a50dce60c4d33b38e_JaffaCakes118
Files
-
f54645f4ba50579a50dce60c4d33b38e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Kong Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.����η Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE