Static task
static1
Behavioral task
behavioral1
Sample
f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118
-
Size
125KB
-
MD5
f9fdbb4a14b44446a1a0f8cc579588f9
-
SHA1
fc064c03af384b58958b389c25b44801390a9045
-
SHA256
46aa6721dd86ea3e6644c3440d6c6d0e1c1730fee0c6039e06c8798f3acc3a7a
-
SHA512
84999a207592f7919125646afe881e705a9d6512f119f801586cf7bc452954ebb52482e5091a1ba31d59398422dd79546ddbf3005ae5b6470bbfc66fd97bc396
-
SSDEEP
3072:oCCKkf2v2vHnMQ3bmxryhiDloHxsoJ2y0ZIhtOc4MExf7vOA:BN2vH93bkyEZ+e0b/nuGA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118
Files
-
f9fdbb4a14b44446a1a0f8cc579588f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
isjk0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
isjk1 Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
isjk2 Size: 722B - Virtual size: 712B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE