Static task
static1
Behavioral task
behavioral1
Sample
ff3821c5134de9f38de715bf6f8083d9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ff3821c5134de9f38de715bf6f8083d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff3821c5134de9f38de715bf6f8083d9_JaffaCakes118
-
Size
144KB
-
MD5
ff3821c5134de9f38de715bf6f8083d9
-
SHA1
afd205a81183b701a3409354678707c66f79c7e4
-
SHA256
fda1207041c1486a182b4db3b139a0b522c374857639cce106f245ed3cd5c2a2
-
SHA512
58658a7a38d282c863257c1a9111194e51d1f085a0031ef85a73bb49b8b3ee3f4b4c7268b85d057c136ec201945df96e9adf6c749b281d24328590fc7ae1422d
-
SSDEEP
1536:CX4qYHQEp+XLIzBVMqFVaQb8oREWT4iGOpBlggO2qU0/OomQzhi9ZvknoIqShLCc:LHx6IjyeQLgO2q7mahi9GOSh3eVzEdp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff3821c5134de9f38de715bf6f8083d9_JaffaCakes118
Files
-
ff3821c5134de9f38de715bf6f8083d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE