Static task
static1
Behavioral task
behavioral1
Sample
f600c87f1e76f379998e0d0158ca394a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f600c87f1e76f379998e0d0158ca394a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f600c87f1e76f379998e0d0158ca394a_JaffaCakes118
-
Size
768KB
-
MD5
f600c87f1e76f379998e0d0158ca394a
-
SHA1
d02b3fbfccd435369a2802ac61f6456356192c65
-
SHA256
827da4e9e0578a8e5398606c59fa786fd3dd4bdd86524aa508d4af34df71403b
-
SHA512
68a3bd540ac364fc585a61b50063ccf3a974bb692dfd8a3babd68a4c8223b7d8bf66b565dc1483e02d8a71690fdfc068709665dd6b42ae2d3eaefdcb2c8abf26
-
SSDEEP
12288:UZWtI6RkeeZJys73dOvXDpNjNe8mYeZJys73dOvXDpNjNe8NeZJys73dOvXDpNjv:UuhaeeZJ8NI87eZJ8NI8NeZJ8NI8TOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f600c87f1e76f379998e0d0158ca394a_JaffaCakes118
Files
-
f600c87f1e76f379998e0d0158ca394a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ