Static task
static1
Behavioral task
behavioral1
Sample
000f6d35ea5397e40ffaa7931a9ae1d3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
000f6d35ea5397e40ffaa7931a9ae1d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
000f6d35ea5397e40ffaa7931a9ae1d3_JaffaCakes118
-
Size
7.2MB
-
MD5
000f6d35ea5397e40ffaa7931a9ae1d3
-
SHA1
232220a4e24be8f7339aa112a0c6f404d0187664
-
SHA256
c9b2f27de98b9edbb6867de09dcd04680e6f35e055947fcc06e6f2fabf1420d2
-
SHA512
df09120525b8afe97a6cef0e008fe3b17ac33d95488fb78255171e58707234b8925e775b8066da1abbd3e985ad38c6d6d29050b20e5b78095460c0fa1ae16e9f
-
SSDEEP
196608:0OGGnte/tLHvHoHK/1OMLCOe3tHGeWl1GhJ+:fXnE1zfhoMLCOSGe41GO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 000f6d35ea5397e40ffaa7931a9ae1d3_JaffaCakes118
Files
-
000f6d35ea5397e40ffaa7931a9ae1d3_JaffaCakes118.exe windows:5 windows x86 arch:x86
1286385b579bc499db79191c63f69d22
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolderW
SHFileOperationW
Sections
.sfubov Size: 34KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hqz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bix Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE