Static task
static1
Behavioral task
behavioral1
Sample
ff527313c13eb7295f3aab81f8005d0e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff527313c13eb7295f3aab81f8005d0e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff527313c13eb7295f3aab81f8005d0e_JaffaCakes118
-
Size
281KB
-
MD5
ff527313c13eb7295f3aab81f8005d0e
-
SHA1
490c073787856cd48880ebcef1b37ac3a54bf928
-
SHA256
9ddf0cbea540cb38f17753c9171749649693c8334d9c7e158064c4fcfa417d87
-
SHA512
9f4f726d63d2dec7e1412898b10886efb6a1e3f97f89dde28f7eb0ba2b3b86a7573d1c304b91773391cb9f3451ce2d40f03b0d7c09f8d69ad9290db194b99cf5
-
SSDEEP
6144:rsnAAqUp6hAUQpzjp2j0d6eTfFI9hnjYSSHCVkXML/sxmILOHMzeAZmoSk:XDUpIEjModJfC9GSSH+kxmILOHKZmoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff527313c13eb7295f3aab81f8005d0e_JaffaCakes118
Files
-
ff527313c13eb7295f3aab81f8005d0e_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE