Static task
static1
Behavioral task
behavioral1
Sample
ff1efc4c8060eb788f5113cdb1d6211e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff1efc4c8060eb788f5113cdb1d6211e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff1efc4c8060eb788f5113cdb1d6211e_JaffaCakes118
-
Size
19.1MB
-
MD5
ff1efc4c8060eb788f5113cdb1d6211e
-
SHA1
e9dd8f410105c1b02bae12c133b31adb46735602
-
SHA256
1d5659405fd2196ef83cbd774df726a4aec92c3acfb08809afd094adf7f6e792
-
SHA512
6febfba8a60498b994c1f0001d65b902aa8f000b520b96486a26e90afa7cb1f5df2f1b934a2b132b02f8c1c89b524ef0c266f9196a5331497495b5c084e51ed1
-
SSDEEP
98304:kkirS+VBKgdgaY5aL8WmoUspwnOB1sp98O5aGmodgaqLH2FUTFzVzWLAHA:Z+fK49LH2FUTFzVzW0HA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1efc4c8060eb788f5113cdb1d6211e_JaffaCakes118
Files
-
ff1efc4c8060eb788f5113cdb1d6211e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 840KB - Virtual size: 836KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18.0MB - Virtual size: 18.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ