Static task
static1
Behavioral task
behavioral1
Sample
ff71896fb838909dbe6bda87e18c2355_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff71896fb838909dbe6bda87e18c2355_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff71896fb838909dbe6bda87e18c2355_JaffaCakes118
-
Size
11KB
-
MD5
ff71896fb838909dbe6bda87e18c2355
-
SHA1
bbfd256857bff8d0cea2ace63f127148f94510bd
-
SHA256
92064a5279ff4f76017648c7bf34847d2e9a3e32f158bb1c22e52ff300f89738
-
SHA512
2c5d9605b7798233df46a13dc4e4f2a35ec20568340e5fef9f8703c148870d7058f6621fa927255ac2700c62873f5ac13d92ac0520310fab955d2ba9c1cc7bcc
-
SSDEEP
192:6bDqG6fjF6VQhi5NDjGTyDBUmcEw8UYBGnKTPxs7fsiexFaPIvozoV0DtvOIC:UqG+6V/jGTyDBCTYB9TPxs7UieX0Vi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff71896fb838909dbe6bda87e18c2355_JaffaCakes118
Files
-
ff71896fb838909dbe6bda87e18c2355_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ziyue! Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE