Static task
static1
Behavioral task
behavioral1
Sample
f087f4d304412105c55b505715f43560_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f087f4d304412105c55b505715f43560_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f087f4d304412105c55b505715f43560_JaffaCakes118
-
Size
2.1MB
-
MD5
f087f4d304412105c55b505715f43560
-
SHA1
f1775edd9eef677544a8ea5444476c9a31b55cd1
-
SHA256
73f6e0d194238a8ba0cc41af7943977d76012d2653b8b24798eaa98737351ac5
-
SHA512
9327781bbcfa8b460074b0cd72182383b5ee23cd0d0213c7e10ce8bf5bfc078871f281ceaaf9277d0e28b6d7692a7922a4c0dcdcf6346ac934ef65bf8bb1b705
-
SSDEEP
49152:EjgPmK32wRgIK2LrqIIOEzzUR/WawiB0LMPGFHmpUQB/M/RHzKq/WFg:E0LgsLrOFzUBsiB06vp3u9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f087f4d304412105c55b505715f43560_JaffaCakes118
Files
-
f087f4d304412105c55b505715f43560_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ