Static task
static1
Behavioral task
behavioral1
Sample
ff09d40147b2c50b35a51b09be3ec42a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ff09d40147b2c50b35a51b09be3ec42a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff09d40147b2c50b35a51b09be3ec42a_JaffaCakes118
-
Size
13KB
-
MD5
ff09d40147b2c50b35a51b09be3ec42a
-
SHA1
872d483437bf52f23800d267b431109642b6ffe2
-
SHA256
ac7d17abd9cca133b93943dd6c8187661fd6f14c29dec6ff4f49889de954bb81
-
SHA512
6ac3f660426102bbbc1bf6b2ecb4b651f792c0c8330a95cf943f0aab78bf5b1c0ba1bb179d2d8a845f0e9e360c44f07454327dfd8be5fb7d5b72e83d8f137781
-
SSDEEP
384:nF0u8888888888888888887L0wYhuoZ6wRKSxGWBhoJ5:n+u8888888888888888887YwyusW4l2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff09d40147b2c50b35a51b09be3ec42a_JaffaCakes118
Files
-
ff09d40147b2c50b35a51b09be3ec42a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE