Static task
static1
Behavioral task
behavioral1
Sample
f682579560d7e9f30d39500171a80fe2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f682579560d7e9f30d39500171a80fe2_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f682579560d7e9f30d39500171a80fe2_JaffaCakes118
-
Size
28KB
-
MD5
f682579560d7e9f30d39500171a80fe2
-
SHA1
d9f0fa2d2962a9fdb8cc55f42feb721b69be6c46
-
SHA256
d79fd27b09a3cf40bdb51eeadab2c538ff01c749e77e9383e33c15f4f8006c02
-
SHA512
1c03d815742e6d511f93145f9594f534fe926adff2b7c712e14bacd17fc6ca215dbfe83513bc181599d5dd67221f16473e3471ec04170b8b838aea316db5bfa3
-
SSDEEP
192:/TX9nEph6P/atLsb60pKNbMvixUMMvexgAchAUEz0AsnQDX0iMVEcRE+Yf:/TYUPyFu60TAcfERDX0iM+cRE+Yf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f682579560d7e9f30d39500171a80fe2_JaffaCakes118
Files
-
f682579560d7e9f30d39500171a80fe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ