Static task
static1
Behavioral task
behavioral1
Sample
fff185c0f05b6bc1c9baa0dcc907a636_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fff185c0f05b6bc1c9baa0dcc907a636_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fff185c0f05b6bc1c9baa0dcc907a636_JaffaCakes118
-
Size
1.1MB
-
MD5
fff185c0f05b6bc1c9baa0dcc907a636
-
SHA1
f41d6db8516d77d9fc2825cfc5fb4cdbde60b43f
-
SHA256
ed40620b169e112db2d4ec7e8e8d3ba071fa7b99914ef10f9959fcaac5168aea
-
SHA512
f2952300ae07925fa350b1720bea01144a3377e446d56820fc023b4aac1709ff172ae808b55750fd914e0f2419c204067ed980b2e584f3f1ce6bc8109ce86a27
-
SSDEEP
24576:nUccKMGFqWtx3BV52pcrzM10NJHTXzSOqSpKcnHrRjmawK:nUc/fFq4xvEGzMONTXzDqAnH9Tw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fff185c0f05b6bc1c9baa0dcc907a636_JaffaCakes118
Files
-
fff185c0f05b6bc1c9baa0dcc907a636_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
svshot Size: 1.1MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE