Static task
static1
Behavioral task
behavioral1
Sample
f9b6cf3b65f7d379613c92f42667aeec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9b6cf3b65f7d379613c92f42667aeec_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f9b6cf3b65f7d379613c92f42667aeec_JaffaCakes118
-
Size
97KB
-
MD5
f9b6cf3b65f7d379613c92f42667aeec
-
SHA1
142c1ed14a14ddcdb0af34a0d2799a2cbfd4df2c
-
SHA256
187dc6d3828ae7cbcab860eb6638a6ef00dc5d8572182e3c07250fe5aaa609f5
-
SHA512
073d872282dd8f4f5c5eaabd2cf6eea70e53f5c405762c722384c5e87539642e5a3f29f40b00cd2bdf0bc556eec76a6cb87f03a19d6630597d755d02896c95f9
-
SSDEEP
1536:gDMRkUmHWMAW8jZ+5PQ3rapDGnT3YZFdNQC5GWkAUa4xHf+V6nOHbvHoE7t:a8FRW5Q32VGTkFdNQuGWu/+cO7fr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9b6cf3b65f7d379613c92f42667aeec_JaffaCakes118
Files
-
f9b6cf3b65f7d379613c92f42667aeec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE