Static task
static1
Behavioral task
behavioral1
Sample
0010113fe6028b7cbf0922c85f685d2d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0010113fe6028b7cbf0922c85f685d2d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
0010113fe6028b7cbf0922c85f685d2d_JaffaCakes118
-
Size
845KB
-
MD5
0010113fe6028b7cbf0922c85f685d2d
-
SHA1
8f1f09522087063f3533f30672ca0a483b600b5d
-
SHA256
43f0645c3dcaeb938ed1257f3cb7c74df2ca4f07ab18d9df7daee8a68a2591af
-
SHA512
66850e9b57ab3a6831f40fea70a5832708b9a79a9e99f6985cfcaf4fc45ae9203991b848fdbe8e3d502aca575c629741fec360322d061aa3db16662d52fd4a68
-
SSDEEP
24576:I1bNAUfmYv5b/LVOFcVEVu5qwwMrs+NwEgAvD:I79fHv5b/L0cuFMrs6gAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0010113fe6028b7cbf0922c85f685d2d_JaffaCakes118
Files
-
0010113fe6028b7cbf0922c85f685d2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ