Static task
static1
Behavioral task
behavioral1
Sample
f90a9c884190d397e922b6fe0deebc17_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f90a9c884190d397e922b6fe0deebc17_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f90a9c884190d397e922b6fe0deebc17_JaffaCakes118
-
Size
508KB
-
MD5
f90a9c884190d397e922b6fe0deebc17
-
SHA1
6e05300ade320f3666fc9c29f0c1cd143fc2f0fb
-
SHA256
5779b1b856de99928dc25e3ab7b1a7b1671a7dc36942a008a3da21b20de85c1f
-
SHA512
ac2aa96d6bd156cfc73782146b990974e7971761c357fe2ad3e716466d8a2d46657b108488ca276363e92698c71ac97027b8e18ec77fd4e259ae97331a1308cb
-
SSDEEP
6144:4JcMMo990lrzdindBEpDP8rh5oaQcph5wl/6zbWlBlKf/+36dyekT+N7RGXFyzw4:ZMMo9Wl3dinnQDWYC2lBCy1TxVyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f90a9c884190d397e922b6fe0deebc17_JaffaCakes118
Files
-
f90a9c884190d397e922b6fe0deebc17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.user Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE