Static task
static1
Behavioral task
behavioral1
Sample
057f03cfd990a39aed70c66f5104f0f3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
057f03cfd990a39aed70c66f5104f0f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
057f03cfd990a39aed70c66f5104f0f3_JaffaCakes118
-
Size
2.4MB
-
MD5
057f03cfd990a39aed70c66f5104f0f3
-
SHA1
8a6ce17eabc5a119b9b6eee49ac420e33de420f1
-
SHA256
c5b620e0c0a9ecb7805e6a93e495581be2d34feb476b8703dbe6f95320f848a1
-
SHA512
21199b1c604b500c42719e30f1aa69dd0c82e4cd72ba28b3018c8c16a937e9406731feb8bcde429fd88343bea34420991b023362c9c32e1de1208e6294b9da6c
-
SSDEEP
49152:WBTvELr7SmmVX0pfgn1sYTfTIba8P7NbUUYQqWS:WBjE2DkW1sYMa8PuUYQJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 057f03cfd990a39aed70c66f5104f0f3_JaffaCakes118
Files
-
057f03cfd990a39aed70c66f5104f0f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PCGUARD Size: 512B - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PCGUARD Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE