Static task
static1
Behavioral task
behavioral1
Sample
f65e8b76bc9b27f9f16ee46657d0ae3a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f65e8b76bc9b27f9f16ee46657d0ae3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f65e8b76bc9b27f9f16ee46657d0ae3a_JaffaCakes118
-
Size
2.6MB
-
MD5
f65e8b76bc9b27f9f16ee46657d0ae3a
-
SHA1
bb31a431e2237667d2e422f61ee7915cefc54450
-
SHA256
1bd5ffe4d85affe019c3e86109542859bac446ba1a513827a50aa5e430fcc229
-
SHA512
4951084a82d349921160fc7b67ab5e567659ea2a07aa1c176d02ff4885aeefba0ef2bb43c516565555137a7f0dee29d499edd43eefb799dd8fce6cc8e7554cb3
-
SSDEEP
12288:4d96rwIEGpzK6FSkFv07G+ItV2j5U0q8wFiuS67r:v/5pzvMGBV29CuuS6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65e8b76bc9b27f9f16ee46657d0ae3a_JaffaCakes118
Files
-
f65e8b76bc9b27f9f16ee46657d0ae3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE