Static task
static1
Behavioral task
behavioral1
Sample
f9c385f5e6ccf226a2afc95bf79070e1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9c385f5e6ccf226a2afc95bf79070e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9c385f5e6ccf226a2afc95bf79070e1_JaffaCakes118
-
Size
108KB
-
MD5
f9c385f5e6ccf226a2afc95bf79070e1
-
SHA1
d37d5faaaa29ebfc8a81c4c1f01b790dd2036efa
-
SHA256
4724b70a57f194e6b9009118d66431c52d439e938f6aafda19662929e616655c
-
SHA512
28e76bd046d6c7786bac9570eb63a64158d5f34732c6c6661adc09c48048cebc5210f693af6bfb185e0408597859aac8918067cea067ea72890fa49cdf29bac9
-
SSDEEP
1536:q0ql6mQGZMZjjE/VZN7+SrU8VU2f4UboevFXLXoNTGrrS1/pR5Kpf:yF24/HN7+Uo2f4U3NbYNqqpWd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9c385f5e6ccf226a2afc95bf79070e1_JaffaCakes118
Files
-
f9c385f5e6ccf226a2afc95bf79070e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE