Static task
static1
Behavioral task
behavioral1
Sample
f31dfe9df26682125dcf232f5d9e4b1e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f31dfe9df26682125dcf232f5d9e4b1e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f31dfe9df26682125dcf232f5d9e4b1e_JaffaCakes118
-
Size
439KB
-
MD5
f31dfe9df26682125dcf232f5d9e4b1e
-
SHA1
9b01a916a022f241472e5c5875985676e2302bea
-
SHA256
3425c2f34de0c8d3fde03c3c8a96aac5b723ac8e16e53088c27d4de8c507f9f3
-
SHA512
885792da5178c8bd2ab39c1d3041c45074b70fc2222b6e874df10e32ae0f371117dd52cf6ef1a52e683af74f33d3929e2e493d68527aa503c8ca3c833fdf9474
-
SSDEEP
6144:jfLrkR7nRvJ9u6iG2juKsluN4H9/ZwTyb3LPwAPL1E29qyNfw6W/lZcEje0wrXwW:zYR52jec4dRwTyb3sOuplZcEq0wT9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f31dfe9df26682125dcf232f5d9e4b1e_JaffaCakes118
Files
-
f31dfe9df26682125dcf232f5d9e4b1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 429KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ