Static task
static1
Behavioral task
behavioral1
Sample
ffa1b8c9b2978b115ca2fa05b3472fa6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffa1b8c9b2978b115ca2fa05b3472fa6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffa1b8c9b2978b115ca2fa05b3472fa6_JaffaCakes118
-
Size
500KB
-
MD5
ffa1b8c9b2978b115ca2fa05b3472fa6
-
SHA1
26eed26808ac5f744c6d9f4c89ad00415f39426a
-
SHA256
070a8a365cbbbfde07c0919a1e2521efd896c8cb3a9964303674cdc97a439844
-
SHA512
01cebd43ddc99bdce5dde63ff6ccd5a190a5f6113abfc4dc9c7d8f64bda07dcc37c0df9edae0e836c6f12d459bb06aa551b7be1235c16583b2af63eb31cef37e
-
SSDEEP
12288:LGkBXTHjs1dMm4bq73GcqhmOr3iwYpL1s3wxZrODN6PLPO5Mb:LPTDydMm1E3ippnxOD8LPpb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffa1b8c9b2978b115ca2fa05b3472fa6_JaffaCakes118
Files
-
ffa1b8c9b2978b115ca2fa05b3472fa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
0 Size: 372KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE