Static task
static1
Behavioral task
behavioral1
Sample
f1a33dff8d593289366ab6d7e880a315_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f1a33dff8d593289366ab6d7e880a315_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1a33dff8d593289366ab6d7e880a315_JaffaCakes118
-
Size
128KB
-
MD5
f1a33dff8d593289366ab6d7e880a315
-
SHA1
1e5688d4d836e90fe6baf6141d5543cf6f25728d
-
SHA256
c6d496ddfd5155267a2b6fb78f2df45574708f8f2c56f8a619776a6f490f4779
-
SHA512
5b997808d4043505c534b9375eb5026ee4e64d687a6e6b0295cb5ada03129d67a2ca02697268b0a9de1ce15130fe266061115a7f5f0268ef9917f121df6a8869
-
SSDEEP
3072:7lF7tlB1Iblj2bf914zJ3kIPNylwnsG+AZ8ISn:pRj7+ljGfv4zz8lenJSn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1a33dff8d593289366ab6d7e880a315_JaffaCakes118
Files
-
f1a33dff8d593289366ab6d7e880a315_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
anbs Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wvyypdf Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
damqm Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
qwetse Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ