Static task
static1
Behavioral task
behavioral1
Sample
1f2f607cdeec9fa016dca16d23ec4179_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f2f607cdeec9fa016dca16d23ec4179_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1f2f607cdeec9fa016dca16d23ec4179_JaffaCakes118
-
Size
125KB
-
MD5
1f2f607cdeec9fa016dca16d23ec4179
-
SHA1
e4e986c50d2def3460a9d93454e7321108ba5ba1
-
SHA256
dd34b4eb5822c1c18be2e2d7aa20e70093d72ae4d26973fb3813c8b7df0351fd
-
SHA512
a879d65095e59430d3bb598091206a8303f8f4dfd5a2e8ea0f83c904e05a7eb5ba7dfd4fac659f645fa4894c439cdf34a4d73f9eee1391601711acdcdb535900
-
SSDEEP
3072:AlvWvoHTIrwqr+D5V4G9FayCswpU6Fz0sKER7NuISZPodGcYjOOr+WDdgZOr:OO2Wwqr+D5V4GDaFswO6Fz0sKy7Nu1Zp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f2f607cdeec9fa016dca16d23ec4179_JaffaCakes118
Files
-
1f2f607cdeec9fa016dca16d23ec4179_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 17KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE