Static task
static1
Behavioral task
behavioral1
Sample
f9e192ee6b2748f4a20a7a06141e615c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9e192ee6b2748f4a20a7a06141e615c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9e192ee6b2748f4a20a7a06141e615c_JaffaCakes118
-
Size
184KB
-
MD5
f9e192ee6b2748f4a20a7a06141e615c
-
SHA1
af0863eb12dd6e6a8216f813dd9370d4cb3f893e
-
SHA256
7bba0cb58066f8768e448b65d9f8e7fceea63068da92f2fcec1f79517b600107
-
SHA512
1608944bd396ed35dbaf9829e8060e73348b4dae04f4f19c04ffddb324ea4de2b9812db1dcf016aa77364075622f9b587d9cacb9a3ba16a190f43cadeecd0890
-
SSDEEP
3072:CxECjL1HDSzFzvfRv/AmypFoWxji/Wn0gA5jv7TwrdZQ0efqDjrVrVFGJFcCILl:idDSpbf1Am1Ejn0V5jzp0NViFDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9e192ee6b2748f4a20a7a06141e615c_JaffaCakes118
Files
-
f9e192ee6b2748f4a20a7a06141e615c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 49KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 57KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE