Static task
static1
Behavioral task
behavioral1
Sample
f157781050943192edd845644e0088ca_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f157781050943192edd845644e0088ca_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f157781050943192edd845644e0088ca_JaffaCakes118
-
Size
271KB
-
MD5
f157781050943192edd845644e0088ca
-
SHA1
8f4296d87d25e0142448f5c33e9a0895cf43289c
-
SHA256
11a19b65ad1eba62b986401a5a067086482e538471f8d5618c21e0eb1ea98b8f
-
SHA512
46cfb9e01fec6879da776998e443bbcfdd3d0b1ed08bcf7422f719748767e99fc6f607dd4fa453596fd34220d84ec27ef856774c2cb04f630ca40432fa829e2c
-
SSDEEP
6144:j0hNOzTJcvPOxTJ7QLTbi+1j/0/0URT6y:Ed4J7U3i4L0cAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f157781050943192edd845644e0088ca_JaffaCakes118
Files
-
f157781050943192edd845644e0088ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 219KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ