Static task
static1
Behavioral task
behavioral1
Sample
f3038e8a5833fb7641e96e43a283558d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3038e8a5833fb7641e96e43a283558d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3038e8a5833fb7641e96e43a283558d_JaffaCakes118
-
Size
598KB
-
MD5
f3038e8a5833fb7641e96e43a283558d
-
SHA1
a9bff996fa970c51acbf584c89e96e9f4277f82f
-
SHA256
84854207f575a4cc7afe7e3eddeec8a82295cf2bf1d07fc5990670d2e1c2020c
-
SHA512
06028da41c22381eab697320151c00997e99c5a615398927c7c420ee3b8b8cc4808dcb5515c3a838b037654e5b0f59ff0ed3603ec8672a648af6b3a45678c01f
-
SSDEEP
6144:b+goBw3w4vndKD+8ubfwZ4o5adFVnIkc30JvDjlbaS5osxdWFyfcvl:ag1Fw+8ubk4gIVIL3UvFaSlxEFaml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3038e8a5833fb7641e96e43a283558d_JaffaCakes118
Files
-
f3038e8a5833fb7641e96e43a283558d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 527KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 505KB - Virtual size: 521KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ