Static task
static1
Behavioral task
behavioral1
Sample
ff99d4e9f9a1fc24391284832e1e9c40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff99d4e9f9a1fc24391284832e1e9c40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff99d4e9f9a1fc24391284832e1e9c40_JaffaCakes118
-
Size
80KB
-
MD5
ff99d4e9f9a1fc24391284832e1e9c40
-
SHA1
685ac08586bf1d14d05417e5140253c3ad072104
-
SHA256
53c07d26a6f32c1b91bb59f474ae840ae7ca456fbad05ec187fa0a792d442f0c
-
SHA512
2a05d81d90832637b89426a712c4fd25ee072309b44c19bc0ea434fbb754d05ffabf6d2e8f5bf499ca4c36bf7ae092015b5de951b206548795a117f9d37ea1e0
-
SSDEEP
1536:MwfFHj14hcno3FyxorpzBW4CrxT8zrnW+A1wz:fFDxnoVyxornCrx4o1wz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff99d4e9f9a1fc24391284832e1e9c40_JaffaCakes118
Files
-
ff99d4e9f9a1fc24391284832e1e9c40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE