Static task
static1
Behavioral task
behavioral1
Sample
ffd7de4304c5dbf60a867c88e57f0eaa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ffd7de4304c5dbf60a867c88e57f0eaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffd7de4304c5dbf60a867c88e57f0eaa_JaffaCakes118
-
Size
60KB
-
MD5
ffd7de4304c5dbf60a867c88e57f0eaa
-
SHA1
c4b8de69e5c4c06a80af2512237f5aa7ddee0744
-
SHA256
982751f6217c5099a4d85b704d313106315a4a63a2175bee78307047e0132299
-
SHA512
24b502a173a1c356ef0e9da9ec4bec75260a654a3de6ecc38894db59e0019c539b5466fdd98873ceb95d741a1f52506f0718034a9836867ec5681525319fb96c
-
SSDEEP
384:Dc90tgLhWw39yvW7u/xG/xj/xpt5n49WaBVx826W09POT7U+g/QHQXQjCdJp:Dc+tgdWw3o6t5n49WC6W09mTOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffd7de4304c5dbf60a867c88e57f0eaa_JaffaCakes118
Files
-
ffd7de4304c5dbf60a867c88e57f0eaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e870e6606f3ba5e0c9253101f13deaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord516
ord593
ord594
ord595
ord631
ord525
ord526
ord529
ord670
ord711
ord607
ord717
ord644
ord537
ord645
ord648
ord570
ord571
ord573
ord578
ord685
ord100
ord689
ord616
ord618
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ