Static task
static1
Behavioral task
behavioral1
Sample
f321642c82ca2bf435bf060b051f9c4d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f321642c82ca2bf435bf060b051f9c4d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f321642c82ca2bf435bf060b051f9c4d_JaffaCakes118
-
Size
269KB
-
MD5
f321642c82ca2bf435bf060b051f9c4d
-
SHA1
23a234a38b30218d9d077f4c83a6104e573ffa8c
-
SHA256
f7cad418089a225362f8d02bef9cee9f3ce3cac0c66882e60b3c0f57b4823cd4
-
SHA512
3092e26768cff42aaaa8979d61093bfec15343c3d4b7261173a5bbc18d6d871f5d9ddad404c5d08a243ebd64644716f369248825c7411fa9b690ca12f2c1b013
-
SSDEEP
6144:V80kBJ3R9kd3rFIWLx8U09jZ3qBsT++7LwHJ80x1rF1:W0kBFk3IQxNmjB3T++7EHJ8Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f321642c82ca2bf435bf060b051f9c4d_JaffaCakes118
Files
-
f321642c82ca2bf435bf060b051f9c4d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 210KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 18KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE