Static task
static1
Behavioral task
behavioral1
Sample
f9a00f17dca4944814abb91d13f1a258_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9a00f17dca4944814abb91d13f1a258_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9a00f17dca4944814abb91d13f1a258_JaffaCakes118
-
Size
43KB
-
MD5
f9a00f17dca4944814abb91d13f1a258
-
SHA1
30cc6b5993c71ad765b75edefb4018868f549a4c
-
SHA256
a6faccf1f7a66c0db6fc692d8506f89a723559137549fc96e2b31f994857646d
-
SHA512
0659e55929ceea2bf29de79420ba74e182cd36d9262b14b8075e35686d6ba694f15f238a1be364eba32b74d073351926f7a2d1808c74b7f3bccd3e09375a48c6
-
SSDEEP
768:2uKUXVuyAEQneEZyXDavFGrlFiJkrMOiUC6SmZSUwOictTYYtnuonQ9Qptk5tM5:NcyvSbZyiFMbftSm7kOTYY9hp25tM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a00f17dca4944814abb91d13f1a258_JaffaCakes118
Files
-
f9a00f17dca4944814abb91d13f1a258_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.vot Size: 35KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.obyv Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tkpgv Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ