Static task
static1
Behavioral task
behavioral1
Sample
ffbff9b2f69211d1e0b8c05bc78acd39_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffbff9b2f69211d1e0b8c05bc78acd39_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffbff9b2f69211d1e0b8c05bc78acd39_JaffaCakes118
-
Size
38KB
-
MD5
ffbff9b2f69211d1e0b8c05bc78acd39
-
SHA1
a3fdba0c874720524b99fe0b6a23a2b09214157b
-
SHA256
da55a8ba31775f61f9139872bb4790f84600a73a48bd2fd241f5906432c86236
-
SHA512
9d3717b27994dcd3e9cc21d86390b1e43c805e0258f7f5411d91e389d84e2f2ec716778818531d04ab6fd8e608242b49f7c0b3f9c06db23a2a13c9a98074908c
-
SSDEEP
768:OgnfLGNABYQsBUlKgf/3Lr4bikrJfVG0ioWQ2W8IK2ilsGPa:vqK70m/9kdZ3WQNrK24sGPa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffbff9b2f69211d1e0b8c05bc78acd39_JaffaCakes118
Files
-
ffbff9b2f69211d1e0b8c05bc78acd39_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.jalyf Size: 31KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vohqb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hydmx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dsd Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE