Static task
static1
Behavioral task
behavioral1
Sample
ff62ba0c26ce41857a3e2957d8fdfdb3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff62ba0c26ce41857a3e2957d8fdfdb3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff62ba0c26ce41857a3e2957d8fdfdb3_JaffaCakes118
-
Size
249KB
-
MD5
ff62ba0c26ce41857a3e2957d8fdfdb3
-
SHA1
0b07f10102572d75ff3981bd755deb5f82067a20
-
SHA256
5348271ac8a9fadbebc8870c7d4d518509cc6baba9579658ee8f999f9aebf934
-
SHA512
787fb8e43acdf790e17a984d432d4eec16d7f6e705613d65a404d49878240138146ad29c71e9e61f4a4b90d2c8c07d24a468fee46e60a6fce44fa5fb75e04a71
-
SSDEEP
6144:p9FN6LKEQfuK0IwVjHSAcRz9eHW6r6YC8wiNyFZva6U:XX6mpn0IKjPzOzZva6U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff62ba0c26ce41857a3e2957d8fdfdb3_JaffaCakes118
Files
-
ff62ba0c26ce41857a3e2957d8fdfdb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gkrm0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkrm1 Size: 248KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkrm2 Size: 617B - Virtual size: 485B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE