Static task
static1
Behavioral task
behavioral1
Sample
f9f37bae9c5d7f09b635d8b3a5b5d305_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f9f37bae9c5d7f09b635d8b3a5b5d305_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9f37bae9c5d7f09b635d8b3a5b5d305_JaffaCakes118
-
Size
1.0MB
-
MD5
f9f37bae9c5d7f09b635d8b3a5b5d305
-
SHA1
e4692279417c4aa028491489768b6b396ab48f05
-
SHA256
267c4489d11543159287debc67577f6fd9cd299736682a8c7e11547535b903f9
-
SHA512
bf4f12a17a3cabd5d84f2a81fafcc04e185cc65efbd70fa01a9d46bdd211715b0bd52992ba06a88d8b6858945c4b757e099013dc02b6276c53049aebf6900e77
-
SSDEEP
6144:fs74s/8ErnuUD93FNAUz4H3rW642gWwtsoP2W7LP:fs74s/8mDtFNHEH3ritsoP57L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9f37bae9c5d7f09b635d8b3a5b5d305_JaffaCakes118
Files
-
f9f37bae9c5d7f09b635d8b3a5b5d305_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1016KB - Virtual size: 1012KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ