Static task
static1
Behavioral task
behavioral1
Sample
ff5df627cad50635588a4e6282ed311a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ff5df627cad50635588a4e6282ed311a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff5df627cad50635588a4e6282ed311a_JaffaCakes118
-
Size
214KB
-
MD5
ff5df627cad50635588a4e6282ed311a
-
SHA1
ff91f040c1e14ffc65c3cea33aedf401028cbd8f
-
SHA256
e7b309945c77f1be25c244f14fa0a5106ba0d3eafd675b2bee6d310ccb8ec5b7
-
SHA512
b5b70aba7c1db49842bdb92d85269688c86aea246cbdd671b3cbbfe71a85b294ab7744f223b7a1f019b8d8acc5fddbf3bce6bb38e1737879db4e08d7cb80ec70
-
SSDEEP
6144:Wpg8bSbs1y0AA8v578aClGf1j6SQe+lWPCam+iTmlxB:QOsQ0aGaCotj6SQe20Ct+ialx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff5df627cad50635588a4e6282ed311a_JaffaCakes118
Files
-
ff5df627cad50635588a4e6282ed311a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE