Static task
static1
Behavioral task
behavioral1
Sample
ed6d925b27492c198219cbee0a00759e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed6d925b27492c198219cbee0a00759e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed6d925b27492c198219cbee0a00759e_JaffaCakes118
-
Size
622KB
-
MD5
ed6d925b27492c198219cbee0a00759e
-
SHA1
e029827eeac95d4375951aa00c50c45a5a0b5ef2
-
SHA256
c09879e7b5e7df93d422fb02dda40228933f69c51faf0d447fe7fe75f3188186
-
SHA512
15772dca8c45cc7e19e1c3cf7f1f197640fab6305e8d7d6e7fd10673621f6502f2376b4ff70f4fbc286268f29b2a2d1e6ce2f6fb1ac5f6100c759a40e66de757
-
SSDEEP
12288:B/IayXYk2KShNsrkzyo47oQN6U4h+fO+HTZDWWjdgI:SaS2Jyo7QNvft9VL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed6d925b27492c198219cbee0a00759e_JaffaCakes118
Files
-
ed6d925b27492c198219cbee0a00759e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE