Static task
static1
Behavioral task
behavioral1
Sample
ffbdd3851c2af8583f90b4fc2ffb2e9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffbdd3851c2af8583f90b4fc2ffb2e9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffbdd3851c2af8583f90b4fc2ffb2e9f_JaffaCakes118
-
Size
9KB
-
MD5
ffbdd3851c2af8583f90b4fc2ffb2e9f
-
SHA1
3c07f598d9144ed2c25eb67884a4f97b5b6d6039
-
SHA256
635275928a78b7449e217d3760ff721f730d9a02322f7087719d502c884a9187
-
SHA512
f79a99e7cf0ab817fcaddc335766caf3676a84fd59f0b353e51db8804dc9b55fe31901793e33e951adf58040a6ae8158f26b4d5e46e142832a1a3e3a033d37cc
-
SSDEEP
192:a1UAnLyXCDDo8pw6c5Y9M5nhv8jJgw9zOig:YLgV8pncy9MJej/9qig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffbdd3851c2af8583f90b4fc2ffb2e9f_JaffaCakes118
Files
-
ffbdd3851c2af8583f90b4fc2ffb2e9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE