Static task
static1
Behavioral task
behavioral1
Sample
f88a1108677f625a4dfc7dc60fc83f05_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f88a1108677f625a4dfc7dc60fc83f05_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f88a1108677f625a4dfc7dc60fc83f05_JaffaCakes118
-
Size
210KB
-
MD5
f88a1108677f625a4dfc7dc60fc83f05
-
SHA1
333057c0b42eb6d3a47ae02dcfbb11ed37bfd65e
-
SHA256
89d0fbf30ad26af948b19a49857a1cca8eb3001398444f8cc4347c9e2ebfcb17
-
SHA512
2b3ef06b6eaedaf50df6d34022063d496c438a1c1fd8dfad98ea811f34f3f2190203f9e4cb53bba85a6cc8002a7293dcd6f103319cb45cc6fd017c978f270992
-
SSDEEP
6144:ktRkKqT/CuwUCgApcZ/ALQ6L7SR5kVF6Ka+E5Q6zNq:7Bu28c5YJWbKfaVQ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f88a1108677f625a4dfc7dc60fc83f05_JaffaCakes118
Files
-
f88a1108677f625a4dfc7dc60fc83f05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ