Static task
static1
Behavioral task
behavioral1
Sample
f93a0353bd5bc9512bfa8c07378921a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f93a0353bd5bc9512bfa8c07378921a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f93a0353bd5bc9512bfa8c07378921a5_JaffaCakes118
-
Size
323KB
-
MD5
f93a0353bd5bc9512bfa8c07378921a5
-
SHA1
7409f708ef493980c118c3381eab8aeea2570985
-
SHA256
71e296e015bdf1ea3cb16ded7c59794d1d907f475c9711319d73fc8efe23b890
-
SHA512
f5c152b1f30547a772c91eff40865c0ec4f50d30b0d419f7b239f67cda7cdae20548d90719604568d989103cac73901884031c3d9de1b3fe09a0bb82df722707
-
SSDEEP
6144:9KCIf7JsU4bS48PTofyNqLdjVhoy9CEI1nVFbYZViy25TbJqWD:ECIf7GU4ffyooEqYx21lqe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f93a0353bd5bc9512bfa8c07378921a5_JaffaCakes118
Files
-
f93a0353bd5bc9512bfa8c07378921a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.LB Size: 1.0MB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.LB50 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..... Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ