Static task
static1
Behavioral task
behavioral1
Sample
95c9c8a661ecbf7a55c4b7c43cda7ff0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
95c9c8a661ecbf7a55c4b7c43cda7ff0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
95c9c8a661ecbf7a55c4b7c43cda7ff0_JaffaCakes118
-
Size
1.2MB
-
MD5
95c9c8a661ecbf7a55c4b7c43cda7ff0
-
SHA1
aef02da80b9727848838ed2446a22ea86fec8c91
-
SHA256
5103d7f1f440612cc2d47a6eb0623ba6e3ef972e0ed11b4414d447b39aeb9259
-
SHA512
23d5ac67183f2971a5ddebf108be7132075531718457ef52e2c3e8b15aaa8eab05cb2b686ad4b7ebd641bb306394155092bc5df3834362be18d266e231aa70ef
-
SSDEEP
768:k7Dviojm1hAJFeolguCMBadnpGuP16GJtT:k/2U1lHb4ouN6GvT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95c9c8a661ecbf7a55c4b7c43cda7ff0_JaffaCakes118
Files
-
95c9c8a661ecbf7a55c4b7c43cda7ff0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�� "VD 5 Size: - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ͩ�8 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE