Static task
static1
Behavioral task
behavioral1
Sample
f55697c485baea93a821ccb816296b55_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f55697c485baea93a821ccb816296b55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f55697c485baea93a821ccb816296b55_JaffaCakes118
-
Size
20KB
-
MD5
f55697c485baea93a821ccb816296b55
-
SHA1
85095c7972fa5698028fbf29bac8b6a52d9f85e2
-
SHA256
c464d28be63d5a7b044b765937d38d6142dcbc8a0b3d88562be6c67e49173b51
-
SHA512
409848bb9f4a5d10f8e6359eafe0c769f23945c718f496a665534a402fc9f89e464c90f9df721d0b82d946ca53e706d9bad8293a93353100b8d5c155017b95da
-
SSDEEP
384:imKY1XrxSU2AkdryRkbSBC8eeKJLMPpmMOpM:i/YBlp2AkBBGs8eeKJYPoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f55697c485baea93a821ccb816296b55_JaffaCakes118
Files
-
f55697c485baea93a821ccb816296b55_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 278KB - Virtual size: 621KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ