Static task
static1
Behavioral task
behavioral1
Sample
f68acbbb9a75172636ca888805357cfa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f68acbbb9a75172636ca888805357cfa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f68acbbb9a75172636ca888805357cfa_JaffaCakes118
-
Size
96KB
-
MD5
f68acbbb9a75172636ca888805357cfa
-
SHA1
539d3bcee0f4c1610045790fc16b70857353ed14
-
SHA256
d11bfc7191140a3543e13970ece95f5e877f7724ea7e2db2f23944077e7e9d8d
-
SHA512
bcb09156fc08e19dbddf8d71d0593b94a953190ce749e89d1deed456651534704765462339a8579504a9a8b454bd43d1a86d90442a0dcb6c416ec09795d541b0
-
SSDEEP
1536:roPdGMDgXYjMwH2dZuF6I7C3nnGiNWnvSfDVF2/7beHkTmn7qTkhvoKUhyrde+m4:HIgyHBC3n0YEbbmn2TkrKVNxpG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f68acbbb9a75172636ca888805357cfa_JaffaCakes118
Files
-
f68acbbb9a75172636ca888805357cfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ